Hide the Realm Settings section on Admin console

[Александр Фролов]

Hi guys,

We are trying to restrict a user-admin and do not allow change the  Realm Settings(pic #1) section but allow to change Users, Groups, Roles, User Federation, Identity Providers.

Basically we need to show everything except Realm Settings and Events

Is it possible ?

[Garth]

Not 100% what you're looking for, but if you remove `manage-realm`, `query-realms`, and `view-realm` from the client roles in the target realm, you can get close. It doesn't include Roles and User Federation, because those are realm-level permissions.

On Fri, Mar 12, 2021, at 2:03 PM, Александр Фролов wrote:
> Hi guys,

> We are trying to restrict a user-admin and do *not allow* change the
> Realm Settings(pic #1) section *but allow* to change Users, Groups,

> Roles, User Federation, Identity Providers.
> Basically we need to show everything except Realm Settings and Events
> Is it possible ?
>

> realm_settings.jpg
>
>
> --
> You received this message because you are subscribed to the Google
> Groups "Keycloak User" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to keycloak-use...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/keycloak-user/99250565-0436-4dbd-aa36-410995feef90n%40googlegroups.com <https://groups.google.com/d/msgid/keycloak-user/99250565-0436-4dbd-aa36-410995feef90n%40googlegroups.com?utm_medium=email&utm_source=footer>.
> Attachments:
> * realm_settings.jpg

[Alexander]

Thank you Garth,

Unfortunately, your suggestion does not work for me because if I remove `manage-realm` my user will not have access to User Federation section.

My goal is to allow the user to have an access to following sections only:

1. Users

2. Roles

3. User federation

4. Identity providers

but restrict an access to Realm Settings

суббота, 13 марта 2021 г. в 11:55:19 UTC+3, Garth:

[Andres Rattur]

Perhaps "Fine Grain Admin Permission" may be something you are looking for: https://www.keycloak.org/docs/latest/server_admin/index.html#_fine_grain_permissions

I haven't used it my self and it's in technology preview.