Hello Juan, this is more a question for the keycloak-user mailing list. Apart form that you need to assign the "manage-user" (and potentially view-clients) role for realm-management. Cheers, Thomas 2017-09-26 22:37 GMT+02:00 Juan Diego <juandiego83(a)gmail.com&gt;: > Hi > > I am trying manage users from my java back-end. > > I just created a user in my master realm, added a client role of > myrealm-realm to that user. I added manage-client, manage-users, > view-user, > view-realm to the assigned roles. > > But I get this, > > Caused by: javax.ws.rs.NotAuthorizedException: HTTP 401 Unauthorized > > So I tried with my main admin user(the one created when I installed), and > it logs. > > And I get status 403. What permission should I add. What am I missing? > > https://gist.github.com/thomasdarimont/43689aefb37540624e35 > > Thanks > _______________________________________________ > keycloak-dev mailing list > keycloak-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev >