[keycloak-user] Restrict application access by role