In the plugin developed for OPA https://github.com/EOEPCA/keycloak-opa-plugin , it seems that the Admin UI was customised (see (js/apps/admin-ui/src/clients/authorization/policy).