Fine-grained permissions don't work

opposer · November 22, 2022, 1:57pm

I gave a client permission “manage” to a user (with a User policy) and also gave him “view client” and “query client” roles. On a client editing screen there is no Save button and all input fields are disabled.

Did it according to this manual

github.com

keycloak/keycloak-documentation/blob/main/server_admin/topics/admin-console-permissions/fine-grain.adoc

[[_fine_grain_permissions]]

=== Fine grain admin permissions

:tech_feature_name: Fine Grain Admin Permissions
:tech_feature_setting: -Dkeycloak.profile.feature.admin_fine_grained_authz=enabled
:tech_feature_id: admin-fine-grained-authz
include::../templates/techpreview.adoc[]

Sometimes roles like `manage-realm` or `manage-users` are too coarse grain and you want to create
restricted admin accounts that have more fine grain permissions.  {project_name} allows you to define
and assign restricted access policies for managing a realm.  Things like:

* Managing one specific client
* Managing users that belong to a specific group
* Managing membership of a group
* Limited user management.
* Fine grain impersonation control
* Being able to assign a specific restricted set of roles to users.
* Being able to assign a specific restricted set of roles to a composite role.

This file has been truncated. show original

What’s wrong?

Topic		Replies	Views
What combination of realm-management roles to allow only User reading & editing? Getting advice admin-console , authentication	3	14584	April 8, 2020
Fine-grained client management Getting advice admin-console	0	869	February 4, 2022
Fine Grained Permissions for granting specific roles	0	471	March 2, 2023
fine grained access in keycloak for client admin and group admin Getting advice	0	188	February 21, 2024
Fine grain access for user management Getting advice	0	575	January 27, 2020

Fine-grained permissions don't work

Related topics