[keycloak-user] Use RestAPI to add roles to groups