This authorization server has 3 main roles:
1) user - all users have this role. It gives access to the “User Sessions” and “User” sections.
2) clientuser - this role allows the user to have their own clients. . It gives access to the “User Clients” section
3) admin - this role makes an administrator out of a regular user. It gives access to the “User Clients” and “Administrator” sections.
You can create your own roles for each client application to control user access to private data in the same way.