Creat neuen user otp (PW: otp) (firstname, lastname and eMail necessary but anything) In realm master: Clients --> Client safe-realm, tab Roles, button "create role", create role with name "custom-add ...