public List<UserDto> getUsersForRole(String roleName) {
        Keycloak client = getClient();
        Set<UserRepresentation> users = client.realm(keycloakDeployment.getRealm())
                                              .clients().get(APIMAN_CLIENT)
                                              .roles().get(roleName)
                                              .getRoleUserMembers();
        return users.stream()
                    .filter(UserRepresentation::isEnabled)
                    // .filter(UserRepresentation::isEmailVerified)
                    .map(this::toUserBean)
                    .collect(Collectors.toList());
    }
Please be careful when using this not to ask for roles that may have a massive number of users.
<p>
If that is required, then a paginated approach may be necessary.
<p>
Ensure that the APIMAN_CLIENT has 'service accounts enabled' set to true. This allows Apiman to speak to Keycloak
using the client name + secret to interact with the Keycloak API.
<p>
Ignores users who are not enabled.

@param roleName the name of the role.
@return the user IDs of users for a given role.
manager/api/security/src/main/java/io/apiman/manager/api/security/impl/KeycloakAdminClient.java