Re: [keycloak-user] What's the point of creating roles per realm and client?
Realm roles vs client roles are there to give you an option. You can use
one or both, it's up to you.
In general realm roles would be roles that are global to your organization
(for example sales, admin, etc..). While client roles would be roles that
are specific to the client.
On 11 February 2016 at 07:33, Renann Prado <darkness.renann(a)gmail.com>
wrote:
I'm pretty new to keycloak. Amazing application btw.
It's working very well, however I found strange/confusing that I have to
create roles in the level of the realm, then per client and then assign to
each user.
What I mean is: why don't we have the roles created in the level of the
realm and then we just assign per application user or is there an option to
make that happen?
Otherwise I have to keep creating roles for all clients, then assigning
for all users. In my case there aren't many users/roles/applications, so
it's fine. But it would be nice to know how to do that.
Thanks
Renann Prado
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
Attachments:
- attachment.html (text/html — 1.8 KB)