[keycloak-user] Authorization services: Trying to model authz for a typical application.

[Pedro Igor Silva]

----- Original Message -----
> From: "Ushanas Shastri" <ushanas.shastri at viteos.com>
> To: keycloak-user at lists.jboss.org
> Sent: Thursday, August 11, 2016 4:33:19 AM
> Subject: Re: [keycloak-user] Authorization services: Trying to model authz for a typical application.

> 
> User A can view applications across all Zones, but approve or reject
> applications only if they are from Zone A.
> 
> User B can only view applications from Zone B, and cannot do anything else.
> 
> User C can do all actions for all Zones.
> 

Do they represent roles in your application ? For instance, User A would be a "manager" role and User C an "administrator" role ?