# Role management in Keycloak **Intended Audience: OpenSlice Administrators** Some initial configuration of Keycloak happens at Installation/Deployment time. Here are some notes regarding user management There are cases that OpenSlice administrators need to configure Keycloak: * Change user roles, e.g. make a Simple user a Service Designer * Domain management * User Password reset