This behavior was not well documented, but there is an RBAC concept of group membership (both for DB Users and via OIDC). Groups can be mapped to roles via a not documented API. Can support for this API be added to the python client?

https://github.com/weaviate/weaviate/blob/8b0aa633651b072ff8ea712d5b2fd6c7e2fa3596/openapi-specs/schema.json#L4935-L5068