[keycloak-dev] Service account permissions missing from JSON exports

Ian Duffy ian at ianduffy.ie
Tue Nov 20 07:07:30 EST 2018


Sorry, v2.5 link due to google popping it up first. I'm using 4.5.0 and
4.6.0.

On Tue, 20 Nov 2018 at 11:15, Pedro Igor Silva <psilva at redhat.com> wrote:

> I see. It should work if you perform a full export, are you using v2.5 as
> mentioned in your original email?
>
> On Tue, Nov 20, 2018 at 8:57 AM Ian Duffy <ian at ianduffy.ie> wrote:
>
>> Hi Pedro,
>>
>> Thanks for your response.
>>
>> No not the ones under the permissions tab, under the "Clients" ->
>> "Client-ID" -> "Service Account Roles" tab -> Client roles.
>>
>> Thanks,
>> Ian.
>>
>> On Tue, 20 Nov 2018 at 10:54, Pedro Igor Silva <psilva at redhat.com> wrote:
>>
>>> Hi,
>>>
>>> Sorry for the late reply. By client permissions, you mean those defined
>>> via the "Permission" tab? If so, they are indeed not exported with a client.
>>>
>>> Regards.
>>> Pedro Igor
>>>
>>> On Fri, Nov 16, 2018 at 8:10 AM Ian Duffy <ian at ianduffy.ie> wrote:
>>>
>>>> Hi all,
>>>>
>>>> When doing a JSON export of a client or full realm via the UI or via the
>>>> instructions at [1] I've noticed if a client has a service account with
>>>> different client permissions assigned they are excluded from the export.
>>>>
>>>> Any workaround to fix this or any guidance on where I should start
>>>> looking
>>>> to contribute a fix for keycloak 4.7.0?
>>>>
>>>> Thanks,
>>>> Ian.
>>>>
>>>> [1]
>>>> https://www.keycloak.org/docs/2.5/server_admin/topics/export-import.html
>>>> _______________________________________________
>>>> keycloak-dev mailing list
>>>> keycloak-dev at lists.jboss.org
>>>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>>>
>>>


More information about the keycloak-dev mailing list