I’m using KeyCloak version 12.0.3 and it seems that the client roles assigned to a specific client in the service-account tab are not exported as JSON.
This is the configuration in the UI:
The realm configuration is exported as follows:
/opt/jboss/keycloak/bin/standalone.sh -Djboss.socket.binding.port-offset=100 -Dkeycloak.migration.action=export -Dkeycloak.migration.provider=dir -Dkeycloak.migration.realmName=SCA -Dkeycloak.migration.dir=/tmp/export
But when the exported configuration is applied, the “view-users” role is not assigned to the client as a Service Account Role.