# Role management in Keycloak

**Intended Audience: OpenSlice Administrators**

Some initial configuration of Keycloak happens at Installation/Deployment time. Here are some notes regarding user management

There are cases that OpenSlice administrators need to configure Keycloak:

* Change user roles, e.g. make a Simple user a Service Designer
* Domain management
* User Password reset