Yeah I guess that was a little obtuse. Let's take the following schema:

definition user {}

definition platform {
    relation admin: user

    permission read_all_resources = admin
}

definition resource {
    relation resource_admin: user
    relation platform: platform
    
    permission read = account_admin + platform->read_all_resources
}