Map OIDC roles or groups to community roles

Problem

Currently new users have to be given permissions manually by an admin or using a bot

Proposal

At least in single community mode, it would make sense to be able to map oidc roles or groups to community roles