Re: [keycloak-user] role-mappings.

Thank you. It helped to put clientID instead of clientName . So this helped for HTTP GET. But when I do HTTP POST to assign roles to a user on the  client realm- management (id = 6c168708-18bd-4453-8b1e-8dc36223d5bd), then I get HTTP 404. I am attaching Wireshark communication with first GET (200) and then POST (404). Could you pls tell me again? Venca. ---------- Původní e-mail ---------- Od: Martin Kanis <mkanis(a)redhat.com&gt; Komu: Vaclav Havlik <Johny.Dee(a)seznam.cz&gt; Datum: 26. 2. 2019 15:31:45 Předmět: Re: [keycloak-user] role-mappings. "Hi, first of all the last part of your path should be client's id not name. This might be sometimes confusing. Here is the example of valid path: http://localhost:8080/auth/admin/realms/master/users/be1b9781-336a-4e60-9694 -c5be74eac7b3/role-mappings/clients/c9cb881f-4e21-4e4b-8de1-f39897088b61 " Second you have to provide a valid authorization to your request. For example using a bearer token. curl -X GET -H "Content-Type:application/json" -H "Authorization: Bearer <here_provide_valid_access_token>" "correct/path/from/above". To obtain an access token using the grant_type password (there are other alternatives as well) you can use: curl -X POST --data "grant_type=password&client_id=admin-cli&username=admin&password=admin" -H "Content-Type: application/x-www-form-urlencoded" " http://localhost:8080/auth/realms/master/protocol/openid-connect/token" Hope this helps, Martin On Tue, Feb 26, 2019 at 11:15 AM Vaclav Havlik <Johny.Dee(a)seznam.cz&gt; wrote: _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user "