'Is it possible to sync roles and permissions from LDAP to Keycloak?

I'm have been setting up Keycloak in an test environment as an IdP, with a user federation to Microsoft Active directory LDAP.

I've been able to sync the roles with ldap-mapper and I can see the roles under Clients - 'Assigned Roles'.

My question is if this means the clients/application that we add will give the right person the right permission when they log in?

For example, if some of the users has admin permissions in AD and others not, in AD, will that permissions follow?

Thanks.

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Solution	Source