The DMaaP Buscontroller API supports the addition of clients to an existing topic via the /mr_clients end point.

Furthermore, this API supports AAF authorization.  

However, the questions arise for ONAP Dublin:

1. Is this authorization granular enough?
2. Should we assume the calls to /mr_clients API are associated with the deployment of MR clients, and therefore have some identity that is used within OOM?
3. how are the API permissions granted to the the MR Client deployment identities?