Surface Keycloak custom roles in Agent Builder “Share” (beyond ADMIN/USER)

[DavidNath4]

Context

• We use Keycloak SSO (OIDC) to log in to LibreChat.
• In Agent Builder → Share (“My Agents”), the role options effectively map to just USER and ADMIN, so we can’t target finer-grained roles that already exist in Keycloak. Community threads also note that groups aren’t supported yet and the system currently recognizes only two roles.

Questions

• In v0.8.0-rc3 (with the new granular/ACL permissions for agents), is there a supported way to surface custom Keycloak roles in the Share UI so they can be used as share targets?
• If yes, what’s the correct configuration/mapping to make those roles appear (docs or examples welcome)?
• If the Share dialog is currently limited to internal roles (USER/ADMIN) or only certain IdP integrations, what’s the recommended approach for Keycloak deployments that already manage access via custom roles?

[dblitz29]

I also encountered the same issue when connecting with OID