How to do permissions for acces type you create with an admin

I think that a containment check (lookup) is what you are looking for:

can-read: >'Attribute'.'Access Types'[ user .'Access Type' ]