David Martin changing the sandbox_role to admin fixed the issue with permissions.

I also changed the configuration of broker in config map according to the broker configuration deployed locally, but that didn't help with the other issue:

TASK [provision-keycloak-apb : Encode admin user credentials] ******************

fatal: [localhost]: FAILED! => {"changed": false, "msg": "Error attempting to get name/namespace from environment: 'POD_NAME'"}}}

The env vars are not passed to the pod as they should be: https://github.com/openshift/ansible-service-broker/blob/master/docs/service-bundle.md#environment-variables