All you need to do is set up a role ‘whatever’ and assign permissions to it (i.e. assign your app and services to that role). You also need to enable open registration in the Config tab and assign open registration users to the role ‘whatever’ you created.