On Pulsar's AuthNZ, need some help understanding the relationship between the

Identity

(or User),

Role

,

Permission

. I see that Identity can get established via mTLS (or others). How is an User Identity mapped to a

Role

? the

conf/broker.conf

and

conf/proxy.conf

has static entries only for the

Roles

.

Role

to

Permission

mapping is available at https://pulsar.apache.org/docs/3.1.x/admin-api-permissions/ . Any documentation links to understand

User

to

Role

mapping ?