

not an authentik user, but after skimming their docs i think you have to:
- create a role “ocisAdmin” via authentiks admin interface
- give this role to a group in the admin interface or create one.
- assign a user thats supposed to be an owncloud admin to the group
it might be that you also have to define somekind of mapper to include this in the informations owncloud receives from authentik, but as i said i only skimmed the docs and would personally just try it without the mapper.
https://kalpadesktop.org/ is basend on opensuse MicroOS, a distro with atomic updates. this comes with KDE, there is also a version with gnome of which i forgot the name.