scope clients to users