URM

in Help Wanted
Is there any security implication for separating a particular instance /api from URM (User rights management)