[keycloak-user] Fine-grained enough for local group admins?

[Per Erik Gransøe]

Hi

Can I solve the following with KeyCloak, with fine-granted permissions enabled? (also posted here: https://stackoverflow.com/questions/51616770/keycloak-restricting-user-management-to-certain-groups-while-enabling-manage-us):

We have Group X and Group Y.

The role 'Group X Admin' can do the following:


  1.  Can create users without a group.
  2.  Can assign users without a group to group X.
  3.  Can edit and manage users in group X.
  4.  Cannot see/edit/manage users in group Y.

Med venlig hilsen / Kind regards

[Systematic Logo]<http://www.systematic.com/>
Per Erik Gransøe
Senior Systems Engineer

Søren Frichs Vej 39, 8000 Aarhus C
Denmark

Mobile: +45 3038 6841
Per.Erik.Gransoe at Systematic.com<mailto:Per.Erik.Gransoe at Systematic.com>
www.systematic.com<http://www.systematic.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 1239 bytes
Desc: image001.png
Url : http://lists.jboss.org/pipermail/keycloak-user/attachments/20190527/5f7d5d79/attachment-0001.png