Realms, clients, OIDC configuration, and group mappings.
RBACDefinition CRDs and Keycloak group binding.