Sync IAM access groups with API Connect

the issue is that I have a user which needs to be able to do various things with API Connect using the apic-slim CLI tool.

When I create an access group in IAM, and add the user to that group, and gives the access group permissions to do things with API Connect, then in order to test it, I cannot just run

ibmcloud login --apikey $mykey -r eu-de

and

apic-slim iam-apikey --apiKey $mykey --server api.xxxxxx.eu-de.apiconnect.cloud.ibm.com --tokenendpoint iam.cloud.ibm.com

and then try to run the apic-slim command, e.g

apic-slim --server api.xxxxxx.eu-de.apiconnect.cloud.ibm.com users:delete <some user> --user-registry $registry --org $org

.

Instead I need to have the user login via the WebUI, and THEN the privileges from IAM gets synced with API Connect, and THEN i can try to run the command to e.g delete a user in the registry.

When I realize I didn't assign correct roles (e.g platform editor/writer/administrator etc) to the access group, then again I need to ask the user to login with the Web UI before the new roles are synced with API Connect, and I can try to run the apic-slim command again.

It would be great if there was a way to have IAM sync with API Connect without having to login with the Web UI. Ideally it happened automatically, but I could live with it being e.g triggered by an ibmcloud CLI, or apic-slim CLI command. But having to login via the Web UI for the sync to start is really painful.