I’ve tried to figure out myself but I gave up, since every modification done on admin console did not reflect on the value of these properties. What do they mean?
According to that page:
" Sometimes roles like manage-realm or manage-users are too coarse grain and you want to create restricted admin accounts that have more fine grain permissions. Keycloak allows you to define and assign restricted access policies for managing a realm."
(Providing the answer 4 years too late, but I also had to spent some time to find what these attributes means, and almost gave up.)