At the moment, we have some rbac utilities implemented in swatch-core (see package org.candlepin.subscriptions.rbac).

This task is to copy this logic into the Quarkus client rbac module.