[keycloak-user] Scope Permissions with Resource Type