definition user {} definition organization { ...
# spicedb
s
definition user {} definition organization { relation admin: user } definition resource { relation organization : organization permission access = organization -> admin }