I want to be able to assign a Principal to be able to "edit" only campaigns that are in Country=CA, but I want them to be able to "view" campaigns that are in both Country = CA and Country = US.