after that, you should select either a Model or a Relation to run the permission queries against