chanced.
self
definition user { relation tenant: tenant permission manage_profile = self + tenant->admin }