so what we know now:\n1. There are several operations on each resource as Amit said (read/access, edit/update. delete/remove, grantor)\n2. Resource can be drilled down (Dashboard, Chat and so on but can be drill down to specific dashboard)\n3. There are \u201cOperators\u201d who can have permission to do several (or all) operation on same resource\n4. There are \u201cOperators\u201d who can have same permission for all the drilled down resource - in simple words - I have permission to all dashboards or simply to \u201cdashboard\u201d or specific resource\n5. There are group of operators who have common permissions (Role)\n6. There are scenarios which a grantor operator would like to grant permission to other players \n7. There are scenarios (flows) for handle it, require several permissions for several different resources - example fetching a specific dashboard - I need an access permission for \u201cGET DASHBOARD\u201d resource + read permission for the specific dashboard