Repository navigation
|
I installed Keycloak 26.0.0 on Ubuntu and was able to create a temporary admin account. When I log in a banner says:
How do I create a permanent admin account? Do I follow the "Managing users" documentation? Do I create the permanent admin account in the master realm? How do I give this admin correct permissions/role? I read the Managing users documentation. I added a user named admin in the master realm and set a password. I do not see how to give it an admin role or admin permissions. I tried the Assign Role button but the admin role is not listed. Thanks! |
Replies: 3 comments 2 replies
|
I'm also struggling with this. No obvious way as far as I can tell either. |
|
I was able to add the admin role using the kcadm.sh command. I am running keycloak on a bare metal system. I imagine the following commands can be adapted to use in other setups. First I used the normal admin console to add a user 'admin' to the master realm. (As I mention in the question. I was unable to add the admin role to that user from that console.) Next, login to the system that is hosting the Keycloak server and cd to your keycloak directory. The kcadm.sh command needs you to first sign in using your temporary admin credentials. I used the name temp-admin for the initial admin account and the name admin for the permanent account. This will prompt you for the temp-admin password. Finally, add the admin role to the admin user. You can verify that the roles for temp-admin and admin are the same with: ./bin/kcadm.sh get-roles --uusername temp-admin
./bin/kcadm.sh get-roles --uusername adminI was able to login to the admin console as the new admin user and verify the admin account has the admin role now. For example, the |
|
I am facing same problem. I started keycloak with following env vars: KC_BOOTSTRAP_ADMIN_USERNAME=admin Now, should can I still run above commands and create username with 'admin' or it will conflict with duplicate usernames? Should I start keycloak with KC_BOOTSTRAP_ADMIN_USERNAME=temp-admin? |
|
After creating the new user, you need to grant them admin privileges. Open the Users → Role mapping section, click on Assign role, then switch the Filters selector to Filter by realm roles. After that, you'll be able to see the admin role for the master realm. |
|
That's What I need! Thx! |
I was able to add the admin role using the kcadm.sh command.
I am running keycloak on a bare metal system. I imagine the following commands can be adapted to use in other setups.
First I used the normal admin console to add a user 'admin' to the master realm. (As I mention in the question. I was unable to add the admin role to that user from that console.)
Next, login to the system that is hosting the Keycloak server and cd to your keycloak directory.
The kcadm.sh command needs you to first sign in using your temporary admin credentials. I used the name temp-admin for the initial admin account and the name admin for the permanent account. This will prompt you for the tem…