I have a client defined with authorization enabled and configured for some policy enforcement.

I have a resource with the name customer and two scopes "read" and "write". All the default stuff is there for resources, scopes, permissions, and policies. I have not added any permissions and policies.

I have the enforcer placed as such:

router.get("/customers", keycloak.enforcer("customer:read"), ...)

No matter what, the result is unauthorized. Is there more to this that is needed for PE to work? The documentation for this doesn't explain much.