Unified push server user management

Good morning guys, it took me some time to understand how the whole integration was working + the scope of what we are trying to achieve.

After reading all the gists, READMEs...I see the whole thing into this way:

* _UPS Admin_ : Can create/read/update and delete Applications/variants. http://localhost:8080/ag-push/
* _Realm Admin_ : Can create users, manage the realm, revoke credentials..etc http://localhost:8080/auth/admin/aerogear/console/index.html

If I understood correctly that's all we need atm. Now I have some open questions:

- Should the UPS admin have access to all variants, push applications and etc? I'm thinking about real scenarios where more than one user exists. For example: admin, marketing, sales...etc

- If yes, are we going to build an interface to specify these roles? Or customize KC?

One alternative would be to have default roles for regular user, into this way we could make use of KC admin, I guess.