Repository navigation
Realm user-manage role is very broad #44651
Unanswered
jyotishet23123
asked this question in
Q&A
Replies: 3 comments
|
@jyotishet23123 Have you taken a look at https://www.keycloak.org/docs/latest/server_admin/#_fine_grained_permissions ? |
0 replies
|
Hello @sschu : Thank you ..Sorry for my late reply I did went through the link and trying to reduce the scope but unfortunatley , I am still getting the group modification along with user-management which i strictly dont want the admin to play around. Do you have some sugegstions or recommended steps ? |
0 replies
|
With fine-grained permissions, it is possible to control who can see or manage a group (view-group, manage-group) and who can do the same thing on the group member (view-members, manage-members). |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Description
Hello Team,
Good Day!!
We are testing the KC 26 version in our Development Environment and would like to assign ONLY user-management roles to set of users.
The problem is when using user-manage roles , the groups also get visible and could be modified easily which is something which want to restrict.I also tried other in-bult realm roles but no help...
Only pure user-management with the ability to assign roles and group and nothing else.
How could i achieve it ?
Value Proposition
User Management will become simple
More secure as users can only do what they are authorized for.
Goals
Realm User Management will become simple
Non-Goals
Specific Realm role for only only doing user management
Specific Realm role for managing Groups
Discussion
No response
Notes
Maybe its my initial idea but please feel free to let me know you feel otherwise.
All reactions