Add a field to the client data type called something like “ClientUser”, make it of type user.
Then populate that field with the entitled user.
Then add a constraint to your RG where ClientUser = Current User.