`check role:somerole can_modify user:whatever`
# spicedb
j
check role:somerole can_modify user:whatever