Repository navigation
How to restrict service account in keycloak? #39327
Replies: 2 comments 4 replies
The find methods return ClientRepresentations. Represenations are detached objects. Changes to them are not automatically made to the server. You should then use the ClientResource - clients().get(id).update(modified_representation) |
|
Thanks @shawkins . |
|
ClientResource also has a roles method. |
|
@shawkins |
|
I think you are essentially doing this operation - you are starting by obtaining the client via a clientId, then assigning a role. |
Uh oh!
There was an error while loading. Please reload this page.
I have a service account with which I want to run create/update realm commands only.
So I disabled the full scope. Now I want to make sure when new realm is created by user, service account should get assigned role to create/manage realm role. I want to assign this role using java methods. Please help me here with your suggestion.
I am trying this :
keycloak.realm("master").clients().findByClientId("service-account-client").get(0) but its not allowing to add roles.
All reactions