I am setting up account service which will be used by all web applications on the network, but the question I am faced with is whether the user roles should be managed by each application (in their ...