System-to-system integration for GraphQL API using RBAC and custom permissions

Hi guys, I’m in the process of setting up Casdoor and using it in combination with custom permissions and the RBAC model to enforce user permissions on a GraphQL API. At this point I have the middleware working for e2e users that request with a token. But I will also need a system to system integration, for another backend which will request the graphql and be able to retrieve resources there on behalf of its users. Is there an ideal way to set this up in Casdoor, for example using group and a user with a special role. My initial thought was an extra organisation and an extra application, but with the application client and secret you can adjust everything, including permissions. Any advice is appreciated 🙂

yes