A more scalable approach is to decouple authorization from identity. Instead of embedding all role logic inside Keycloak, we ...