title: Can we restrict users in identity server4 to specific applications?
body: <p>I am trying to implement IdentityServer 4 for enterprise scenario.</p>
  
  <p>I understand that users are registered against Identity server.</p>
  
  <p>My question is how to give permissions to users against applications, like as users are needed to assign to a particular application, if not assigned application should return unauthorized.</p>
  
  <p>If a user needs to access multiple applications then multiple assignments are needed.</p>
  
  <p>I am looking a way for Identity server to invalidate the submitted token if the user doesn't have access to the application in a single go, even though the challenged token might be valid if it is submitted by other application which the user has access to</p>