...
A User in Keycloak is anyone who needs to access the EWC services. Users have unique identities (like usernames and passwords) that they use to log in. Users are unique within a single tenancy. Users having access to multiple EWC tenancies have a dedicated account in the IAM of each tenancy.
Roles
Roles define what actions users or groups of users can perform within the EWC IAM and the connected clients (applications and services). Roles come with certain responsibilities and permissions. For example, an "Admin" role might have permissions to manage other users and configure settings.
...