realm: $(REALM_NAME)

users:
  - username: service-account-$(QUANTUM_BACKEND_CLIENT_ID)
    enabled: true
    serviceAccountClientId: $(QUANTUM_BACKEND_CLIENT_ID)
    clientRoles:
      realm-management:
        - view-users
        - query-users

userProfile:
  attributes:
    - name: "username"
      displayName: ${username}

      permissions:
        view: ["admin", "user"]
        edit: ["admin", "user"]

    - name: "email"
      displayName: ${email}
      required:
        roles: ["user"]
      permissions:
        view: ["admin", "user"]
        edit: ["admin", "user"]
      validations:
        email: {}

  unmanagedAttributePolicy: "ADMIN_VIEW"