title: keycloak map attributes to permission
body: <p>Currently i am trying to add a large amount of users to keycloak, they have the attribute &quot;impersonsate&quot; over which i want to decide which of the users may impersonate.</p>
  <p>Is there a way to use keycloaks built-in features to distribute the appropriate permission depending on this attribute?</p>
  <p>If not, is there a way to do it within the UserProviderInterface or similar?
  Im adding the users using this Interface, so if theres a possibility, i could just decide inside my provider if the permission should be set.</p>