> But the problem is, permissions are actually a representation of business processes snd communication structures. They are rarely user <-> role <-> permission

> But the problem is, permissions are actually a representation of business processes snd communication structures. They are rarely user <-> role <-> permissions (I wish they were!). UMA2 is available in Keycloak. Known as Authorization Services. I have written about it in the past: https://gruchalski.com/posts/2020-09-05-introduction-to-keycloak-authorization-services/ https://gruchalski.com/posts/2020-09-05-introduction-to-keyc....