What's the right way to set up Workspaces with Hasura + Keycloak?

[tarik-ex]

In my app users can create a "Workspace". Workspaces can have multiple users and users can have one of 4 roles in the workspace (admin, edit, comment, view).

I thought about 3 ways this could be done with Hasura + Keycloak:

1. Set up a realm for each workspace (seems like hard work)
2. Create 4x new roles every time a workspace is created. Use these roles to manage permissions
3. Have a single "user" role in Keycloak and manage the roles somehow through Hasura?

I'm new to Hasura so I'm not really sure what the best approach should be. Any resources or guides you could point me to would also be appreciated.