We have more than one group on keycloak for different products within the same realm. We have an admin user to manage all these clients and configurations temporarily but we want to add new admins. These admins should access only their own assigned clients or should access created clients by them. It was easy to provide that with different realms but we decide to manage them all in the same realm.
How can we separate the resource by a workgroup in the same realm in the keycloak admin console?
Additionally, We want to add new roles in realm-management client for our support workers. For example, A support worker should manage user accounts but A support should not see the user groups or groups tab on the keycloak admin console.
How can we provide that? Could we change roles on the keycloak admin console?