Device Authentication

Wondering what would be the best way to go about creating device authentication.

I'm thinking generate a random user and use that on the endpoint, but wondering how to separate those users from the normal users.
Is there a way to add to the roles perhaps? So can separate the real users from the devices.

Thanks in advance