The gluebuddy client is required for gluebuddy to retrieve users and groups membership without being able to change other keycloak data. The realm-management roles cannot be assigned yet via keycloak as it does not know about the roles and realm-management client.