[keycloak-user] Global "reporting" role like admin but with read-only access to everything?