Hi Andriy, Did you mean "all users within a certain *role*"? If yes, this can be easily done with either REST API or Keycloak Admin Client. If you indeed mean permissions (fine-grained), I'm afraid there's no simple answer. Permissions are not mere collections of users, they're rather combinations of policies, which can be evaluated against individual users. So generally there's no solution to the problem, but in some cases (where only user/role/group policies are used) I think you can enumerate users that satisfy the permission. Cheers, Dmitry В Fri, 15/12/2017 в 15:47 +0200, Андрій Мартинюк пишет: