chanced.
self
definition user { relation self: user relation tenant: tenant permission manage_profile = self + tenant->admin }