[keycloak-user] How to create a 'provisioning only' user in Keycloak?

Hello Keycloak-Users, I'd like to create users solely for Keycloak instance provisioning operations (e.g. via kcadm.sh), which should not able to login via the admin-console. Does anyone know a way to do this? Cheers, Thomas