if you need to basically make an m X n, its sometimes better to assign them dynamically, ala https://authzed.com/blog/user-defined-roles