uma_authorization role usage #17529

syalioune · 2023-03-09T10:44:24Z

syalioune
Mar 9, 2023

Hello,

I am reviewing the configuration of one keycloak instance and I'm wondering about the impact of removing the uma_authorization role or at least removing it from the default role (please note that I'm not using authorization services).
There are no references to this role in the documentation.

From what I can tell, it was introduced by KEYCLOAK-2753 and was used to scope RPT requests

KeycloakEvaluationContext evaluationContext = new KeycloakEvaluationContext(this.authorization.getKeycloakSession());
        KeycloakIdentity identity = (KeycloakIdentity) evaluationContext.getIdentity();

        if (!identity.hasRole("uma_authorization")) {
            throw new ErrorResponseException(OAuthErrorException.INVALID_SCOPE, "Requires uma_authorization scope.", Status.FORBIDDEN);
        }

That part is not present in the current codebase and I cannot find any reference to uma_authorization or AUTHZ_UMA_AUTHORIZATION other than in tests (mainly arquillian), CLI or constant file.

Is that uma_authorization role still relevant ?

syalioune · 2023-03-31T17:39:34Z

syalioune
Mar 31, 2023
Author

Anybody have the answers ?

2 replies

si90 Jul 29, 2025

A little bit late, but regarding redhat uma_authorization provides the an authorization API token (AAT) which "An AAT enables a client application to query the server for user permissions."

syalioune Aug 5, 2025
Author

Thanks @si90. This is in line with what I gathered earlier. That is uma_authorization was or still is very tied to authorization services.
It does not seem to be required if one doesn't use those services.

Navigation Menu

Repository navigation

uma_authorization role usage #17529

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 2 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

uma_authorization role usage #17529

Uh oh!

syalioune Mar 9, 2023

Replies: 1 comment · 2 replies

Uh oh!

syalioune Mar 31, 2023 Author

Uh oh!

si90 Jul 29, 2025

Uh oh!

syalioune Aug 5, 2025 Author

syalioune
Mar 9, 2023

Replies: 1 comment 2 replies

syalioune
Mar 31, 2023
Author

syalioune Aug 5, 2025
Author