Provisioning is done using the keycloak-config-cli.
It allows for partial realm imports.
Examples can be found here:
https://github.com/adorsys/keycloak-config-cli/tree/main/src/test/resources/import-files
Tip: Make changes directly in Keycloak, export the realm, and transfer the changes into your configuration.
Note: It’s important that no sections (e.g., users, roles, clients, ...) appear more than once.
The CLI always overwrites existing entries.