Update keycloak (not upgrade) in field automatocally

Hi all;
we are facing an interesting issue with keycloack config updating on site.
we have keycloack deployed on a customer site. the customer at the least changes his admin console password and I dont know what the password is.
now, we need to add new clients to the existing realm, and we need to automatically do it on site. As this is automatic, we cant ask the customer for its password (which as I understand we will need to execute cli commands for example).
in addition,
I assume many people already had the same situations and was wondering how it was dealt with
thanks a lot for your suggestions…