Map Administrator role

[col-panic]

Can the "Administrator" role be mapped (configurable)? That is, the oauth2 idp asserts the client role administrator if yes then user becomes or stays administrator, else looses admin right.