Hey Abdullah! Great question about handling shared resources across instances. Based on Permit.io's model, you have a few options for this scenario: ​*Option 1: Use Top-Level Roles for Shared Resources*​ In Permit.io, roles exist at the organization level and can grant permissions across resources (1) . You could create a specific top-level role like

boxes_viewer

or

boxes_editor

that only grants access to the boxes resource (2) . Users who need boxes access would get both their project-level role AND this boxes-specific role (1) . ​*Option 2: Model with ReBAC Relationships*​ Since boxes are shared across projects without direct relationships, you could model this using ReBAC's resource roles and role derivation (3) (4) . For example: • Create a

boxes#viewer

resource role (3) • Directly assign users to this resource role when they need boxes access (4) • This keeps the access separate from project-level permissions ​*Option 3: Use Tenant-Level Permissions*​ If boxes truly belong to the entire organization, you could place them at a higher tenant level (like a "global" tenant) (1) . Users would have their project-specific roles in project tenants, plus additional roles in the global tenant for boxes access (5) (1) . The Mesa Verde demo shows a similar pattern where certain resources (like Accounts) exist at a higher level than others (5) . They use role assignments at different levels to manage this complexity . Which approach fits best depends on whether you need inheritance, how often users need boxes access, and whether you want to track boxes permissions separately from project permissions.

To learn more, see the sources I considered: [[1] Policy Basics](https://docs.permit.io/how-to/build-policies/policy-basics) [[2] Components](https://docs.permit.io/how-to/build-policies/rbac/components) [[3] Build Authorization Like Google](https://www.permit.io/blog/build-authorization-like-google) [[4] Modeling Google Drive Permissions with ReBAC](https://docs.permit.io/modeling/google-drive) [[5] Fintech / Banking Demo Application](https://docs.permit.io/modeling/mesa-verde)