According to the doc, recourse and scope of a resource server is automatically allowed for a third-party app if the permission is positive by evaluating its policies. Is there a way to let user interfere in the middle? For example, a web page list all the resources and scopes the third party requires, and user can choose if they’d like to consent all or part of them.