Unable to setup IDP token exchange in Keycloak 4.6.0.Final

Question

After spinning up a Keycloak instance by docker image 4.6.0.Final, the permissions tab of the client and Identity Providers are missing. The tabs are available in version 4.5.0.Final out of the box. The missing of permission tab prevents the setup of token exchange by following official document, Securing Apps Token Exchange

Answer 1

I have received an answer from Pedro Silva via the mailing list:

Hi,

...We no longer enable tech preview features by default. You need to enable the feature you want, such as admin fine grained permissions, by passing a specific environment variable. Try to boot your server using this system property:

-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled
-Dkeycloak.profile.feature.token_exchange=enabled

Docs are not reflecting these changes, created https://issues.jboss.org/browse/KEYCLOAK-8865.