[keycloak-user] Restrict user's access to a subset of realm's clients

Hello, I'm wondering, is there a way how to restrict certain clients in a realm for a given user? Of course, I can map roles to user and check them in each application. However, it seems like it might be easier to perform directly on Keycloak side. What is the correct way how to achieve that? Thanks in advance.