Summary: Users with the “System” role assigned via keycloak (e.g. admin, folio) receive an empty permissions.permissions array in the response from .../_self.

Expected results: Assigning the “System” role in keycloak grants all permissions. In the response from _self for a user with this role assigned, permissions.permissions will be populated with all available permissions.

Actual results: Assigning the “System” role in keycloak grants all permissions to make any API request (they all return 2xx), but the response from _self is an empty permissions.permissions array, causing UI components that inspect that data structure to believe the user has NOT been granted any permissions.