How to handle permissions of role in Keycloak What is the best practice of creating a client role and assigning permissions to it? Should I use Groups as role and Roles as permissions, or make use of composite roles?