Yes. That's exactly it. If the app is considering a child, the child has the parent id in it. It can ask the parent for the authorization. But for the direct grant it would need to ask via the direct grant which knows about the child and the grant. Somethiing like https://play.authzed.com/s/UGT5lUX_9gad/schema