KEYCLOAK-292 Fine-grained admin control