---
# RBAC declaration for the in-role plg_system_keycloak OIDC plugin
# The plugin maps the Keycloak `groups` claim
# onto Joomla's built-in usergroup IDs:
#
#   /roles/web-app-joomla/administrator → Super Users (id 8)
#   /roles/web-app-joomla/editor        → Editor      (id 4)
#   /roles/web-app-joomla               → Registered  (id 2)
#
# `administrator` is the implicit role auto-added by and is
# always present, so only the additional roles below need explicit
# declaration.
roles:
  editor:
    description: Editor in Joomla — maps onto the built-in `Editor` user-group (id 4).