Currently we don't support importing RBAC roles from OIDC. You can limit which OIDC users can use coder from your identity provider's side by only allowing the users you want to access Coder