Add a field to the client data type called something like “ClientUser”, make it of type user. Then populate that field with the entitled user. Then add a constraint to your RG where ClientUser = Current User.