Keycloak defaults

[jonsnowseven]

Hello.

I am using a managed keycloak server (which I don't have write access to). I have some questions:

1. When role based AuthZ is enabled, does Apicurio Registry create the roles or does it expect the roles to exist in Keycloak?
2. Same question as before regarding clients?
3. Is it possible to override the default realm that Apicurio Registry is expecting (registry)?
4. Is it possible to configure specific resource access? E.g., allow a user to only access Schemas in a specific group

Thank in advance