----- Original Message -----
From: "Ushanas Shastri" <ushanas.shastri(a)viteos.com>
To: keycloak-user(a)lists.jboss.org
Sent: Thursday, August 11, 2016 4:33:19 AM
Subject: Re: [keycloak-user] Authorization services: Trying to model authz for a typical
application.
User A can view applications across all Zones, but approve or reject
applications only if they are from Zone A.
User B can only view applications from Zone B, and cannot do anything else.
User C can do all actions for all Zones.
Do they represent roles in your application ? For instance, User A would be a
"manager" role and User C an "administrator" role ?