We have a usecase, a module contains list of reports. Reports are dynamic , we need to add in permission before accessing this report except admin. This report set varies(not fixed) from tenant to tenant