Users are authorized to access only their apis and apps.