Function workspace_role_grants 

pub fn workspace_role_grants(
    workspace: &str,
    granted_by: &Subject,
) -> Vec<Grant>

Every role’s grants for a new workspace, given by its owner. Ids are role:<role>:<index>.