I’d like to configure Keycloak to allow users limited realm console access to be able to
- create roles, but not modify any existing roles
- create a group and map the roles they have created to the group, but not modify any existing groups
- create a client, and configure that client, but not modify any of the existing clients
I can’t determine if this is possible, or how. Is this possible?