reason I ask is, I'm reading through the GCP IAM role modeling example. You've got

definition role_binding {
    relation user: user
    relation role: role

    permissions ...
}