[keycloak-user] User's groups in authz policy