[keycloak-dev] Realm admin permissions added
bburke at redhat.com
Thu Feb 27 09:19:53 EST 2014
On 2/27/2014 6:12 AM, Stian Thorgersen wrote:
> Added one more role create-realm. This is handy as it allows adding users that can create new realms without giving them permissions to everything. When a realm is created and the user is not an admin the user will be given all roles for that realm. As a side-effect this also let's you have a SaaS type solution where self-registered users can create and manage their own realms, but not access other realms.
> Now it's only a bit more testing + documentation left for this
Awesome! You figured out the chicken and egg problem with SaaS that
baffled me for awhile. Very cool Stian.
JBoss, a division of Red Hat
More information about the keycloak-dev