In a Strapi 4.20.5 quickstart project, the file is in my-project/node_modules/@strapi/plugin-users-permissions/server/content-types/permission/index.js
Since it comes as a dependency, it seems strange to edit the relationship there, changing this is a hack. So I guess the conclusion is, in Strapi there is no concept of multiple roles for end users.