Yeah so for completeness, here's a simplified setup of what I am doing:

definition user {}

definition team {
    relation member: user
}

definition resource {
    relation direct_editor: user | team#member
    relation feature_flag: user:* | team:*
    permission editor = direct_editor & feature_flag
}
`