public boolean hasAdminAccess(ProxyContext context) {
        return context.getApiKeyData().getPerRequestKey() == null // not application
                && RuleMatcher.match(context, adminRules);
    }
Application makes a call to read own configuration on behalf of user.
server/src/main/java/com/epam/aidial/core/server/security/AccessService.java