Hi I found the keyclaok service account feature very effective to provide access to some external vendor process access to your secured REST endpoints. https://www.keycloak.org/docs/3.1/server_admin/topics/clients/oidc/servic... [https://www.keycloak.org/docs/3.1/server_admin/topics/clients/oidc/servic...] I just got struck at one point, how to assign any group to a service account user(built in) I see role assigments is possible. Is there a workaround to achieve if not direct support for this. Because i have some policies where on the basis of which my app share certain resources. I appreciate any help on this. Cheers Abhishek via Newton Mail [https://cloudmagic.com/k/d/mailapp?ct=pi&cv=9.8.307&pv=11.2.6&...]