[keycloak-user] User cannot assign client Role to user with just

Hi keycloak users, We recently upgraded from keycloak 3.4.3 to 6.0.1, and noticed that a user with the roles 'manage-users' and 'view-users' on the client 'realm-management' cannot see the list of client roles any more. Because of that, the user cannot assing a specific client role to a group or a user. Screenshot: I[image: image.png] Is this a bug? Or is expected behaviour? As a workaround I added the role 'view-clients' to that user, but now the users sees to much. I only want to configure that user, so he can manage the roles for users & groups. Do I need to enahble the fine-grained permissions for that ( https://www.keycloak.org/docs/6.0/server_admin/#_fine_grain_permissions) Thx for the answers, Kind regards, Robrecht