Unified push server user management

Good morning guys, it took me some time to understand how the whole integration was working + the scope of what we are trying to achieve.

After reading all the gists, READMEs...I see the whole thing into this way:

* _UPS Admin_ : Can create/read/update and delete Applications/variants. http://localhost:8080/ag-push/
* _Realm Admin_ : Can create users, manage the realm, revoke credentials..etc http://localhost:8080/auth/admin/aerogear/console/index.html

If I understood correctly that's all we need atm. Now I have some open questions:

- Should the UPS admin have access to all variants, push applications and etc? I'm thinking about real scenarios where more than one user exists. For example: admin, marketing, sales...etc

- If yes, are we going to build an interface to specify these roles? Or customize KC?