if you're currently using keycloak for authz (e.g. using RBAC roles in JWTs), then yes, you're going to have to do some sort of import process, and no, that's not something that we currently have tooling built around.