you'd add a

relation platform: platform

to each type, and the put the superuser role on that (sorry, didn't see that Jake responded above)