I have multiple apps registered with azure AD including UI/API. User attributes contains "customer id", "role" for permissions to the applications. Each user