Re: [keycloak-user] 403 Forbidden error when trying to access realm admin console in 4.7.0

Hello, We've recently upgraded from 4.5.0 to 4.7.0 and users can no longer access the dedicated realm admin console (/auth/admin/{realm}/console) with the same realm-management roles that they had in 4.5.0. We only want our admin users to manage users and groups and in 4.5.0 we were able to assign the following roles to our admin users such that only the "Manage > Groups" and "Manage > Users" tab show up in the realm admin console: 'manage-users', 'query-groups', 'query-users', and 'view-users'. However, with the new upgrade to 4.7.0 these admin users with the same realm-management roles assigned can no longer access the realm admin console and they see a 403 Forbidden error page. Has anyone run into this issue recently or if there are some new realm management roles added in 4.7.0 that we need to re-configure? Best regards, Mandy -- *Mandy Fung **|* Software Engineer 1 *| *Tasktop *email: *mandy.fung(a)tasktop.com _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user