Add mechanisms for Delegated administration

[Jose Gonzalez]

Let’s say a company has a bunch of partners, and they want to create a portal to enable an “admin” at the partner to manage the users for the partner organization.

• Custom scripts will be used to implement the checks (ie. caller is allowed to make the operation)
• Java code needs to pass more contextual information (eg. which client is associated with the presented access token, request params)
• Respond with specific error when the caller is not allowed