Write permissions requirements for standalone server

I am configuring Keycloak to run with a minimal permissions set. I have discovered in the Wildfly Admin Guide Paths section that the following paths cannot be defined:

jboss.home.dir
user.home
user.dir
java.home
jboss.server.base.dir

What defines these five paths?

Is it documented somewhere which directories Keycloak requires write permissions, or even just files within directories that require write permissions?