I want to build security system on my React project with Springboot app. I quickly added keycloak at docker and added SecurityFilterChain for auth to APIs on my Spring app so that keycloak worked on my React app. I am taking login and register and then I am getting APIs with this user and user’s token from Spring. But now I wanna add some detail to my project like roles or using keycloak-mysql. My question is, why do we need Keycloak embedded system for? And Can I give roles to API with annotation on Springboot without using embedded system or do I have to set roles on Keycloak admin panel and filtering on React App?