Hm, very interesting! So I could also have:

definition employee {
  relation team: team
  relation org: organization
  permission view = org->view_employees + team->view_employees
}

Sounds like a good idea! The only downside is that I'll have to update the schema with each new permission, but might not be a big of a deal