Alfresco is integrated with AD (Active Directory). I want a user (e.g. service_user) to connect to Alfresco using CMIS API. But I don't want the same user (e.g. service_user) to be able to connect to Alfresco using Standlone Aflresco explorer. How can I achieve this?