From intercom:

It'll be much more awesome if permissions could be grouped or inherited somehow. Right now I have to add the same rules for every table X-hasura-org-id _eq org_id

I would say an another tab "Permissions".
There I add a permission "Tenant-only" f.e. with X-hasura-org-id _eq org_id
After that when I create/edit a table I see a list of available permissions and select "Tenant-only" with a checkbox