Hey Razi, we generally recommend PBAC than ReBAC in most cases. If you want to stick with ReBAC then you'll need to store the relationship between the resource and the principal (user /microservice) within your own infra then parse them as attributes to validate their relationship within a policy condition. Happy to have a chat to explain how this could work.