To answer my own question, yes, you can, see the last post here: https://www.graph.cool/forum/t/multiple-permission-queries/825/11