Accessing realm admin console in 4.7.0 requires view-realm role

We've recently upgraded from 4.5.0 to 4.7.0 and users can no longer access the dedicated realm admin console (/auth/admin/{realm}/console) with the same realm-management roles that they had previously. Our admin users should only be able to manage users and groups so that only the "Manage > Groups" and "Manage > Users" tab show up in the realm admin console. Previously in 4.5.0 they had the 'manage-users', 'query-groups', 'query-users', and 'view-users' roles in order to make this happen.

However, with the new upgrade in 4.7.0, admins are now seeing a 403 forbidden error when trying to access the admin console. We found that by adding the 'view-realm' role, users are then able to access the admin console but this enables too many permissions for the admin users that we do not wish to enable such as configuring the Realm Settings, Roles, User Federation, and Authentication.

Looking at past issues in this Jira, perhaps this is a similar problem that is now broken again? https://issues.jboss.org/browse/KEYCLOAK-4328