[keycloak-user] Setting up realm automatically -Client Service Account Roles

Dear all. Using KC 4.2.1. I want to setup my realm and all (initial) clients automatically (using Ansible). Most things work, but right now I do not know how to set the "Client Service Account Roles". I am looking at kcadm primarily, but any other way to set this would be great, too. Thanks & greetings Henning