In HRMS service I made employee,salary and other things for employee apis,have done secret manager implementation so that only user with specific roles can access the api now want to implement db level authentication so that except the specified role of employee others can query in GCP db and get entry. Can someone suggest one best practice to implement this idea so that user with role admin can query and retrieve the data actually while creating employee I am registering them as user and used create user api from user service( different from hrms service)