You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Keycloak admin fine grained permissions - problem
#42265
I need to create a role, let’s call it admin-portale, that allows users to create, view, edit, and associate groups, users, and roles.
I’m using the latest version of Keycloak (23.3.3): https://www.keycloak.org/docs/latest/server_admin/index.html
Following the guide, I enabled admin permissions and created the permission group.create.permission with "enforce all groups" and all authorization scopes (view, manage, manage membership...). I created the policy group.create.policy and assigned it to the admin-portale role.
I did the same with the user resource and linked its policy to the admin-portale role.
I also ran some tests by assigning client roles from realm-management like query-groups, query-users, but the result is the same.
From the API, I can correctly create groups, and the token includes the necessary roles. But from the UI, when I log in with the user who has the admin-portale role, I only see the page of the groups that the user belongs to — not the button to create new groups or the list of all existing groups.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
I need to create a role, let’s call it admin-portale, that allows users to create, view, edit, and associate groups, users, and roles.
I’m using the latest version of Keycloak (23.3.3):
https://www.keycloak.org/docs/latest/server_admin/index.html
Following the guide, I enabled admin permissions and created the permission group.create.permission with "enforce all groups" and all authorization scopes (view, manage, manage membership...). I created the policy group.create.policy and assigned it to the admin-portale role.
I did the same with the user resource and linked its policy to the admin-portale role.
I also ran some tests by assigning client roles from realm-management like query-groups, query-users, but the result is the same.
From the API, I can correctly create groups, and the token includes the necessary roles. But from the UI, when I log in with the user who has the admin-portale role, I only see the page of the groups that the user belongs to — not the button to create new groups or the list of all existing groups.
All reactions