Repository navigation
keycloak Admin: Client could not be updated: HTTP 403 Forbidden #51105
Unanswered
ahmedharrak2022-ui
asked this question in
Q&A
Replies: 1 comment
|
I guess this the client keycloak uses to enable management of this realm from the admin console, so delting it is probably blocked for a reason. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Hello Keycloak community,
I am using Keycloak 26.7.0 and I noticed that a Keycloak admin user cannot disable the default client realm-management in another realm.
Steps to reproduce:
Create a new realm (for example test-realm).
Login as a Keycloak administrator from the master realm.
Navigate to:
test-realm → Clients → realm-management
Try to disable the client (Enabled = OFF).
Save the changes.
The update fails with:
Client could not be updated: HTTP 403 Forbidden
When checking the client representation through the Admin REST API, I see:
"access": {
"view": true,
"configure": false,
"manage": false
}
My expectation was that a Keycloak administrator should be able to manage or disable default clients in other realms.
Questions:
Is this expected behavior in Keycloak 26.7.0?
Is there a specific permission or role required to manage the realm-management client?
Is there any recommended way to disable or remove this client if it is not needed?
Could this be considered a bug, or is there a security reason behind this restriction?
Thank you for your help.
All reactions