Preserving permissions/policies on upgrade

[Jan Groenewald]

Hi

I recently inherited a keycloak 6 instance and have to upgrade it to keycloak 26.4.2 while getting my head around keycloak.  So far so good, the sql got exported and imported and various clients tested.

I don't see the existing group permissions+policies in the new instance (letting various groups' admins edit their group's membership), under the new main menu item in keycloak where the new fine grained permissions are. We can create new permissions+policies, but I am trying to migrate the existing few hundred permissions.

I DO see entries in the database table resource_server_policy... any advice, pointers to upgade notes?

Regards,

Jan

--

Jan Groenewald

DevOps Engineer

NRF-SARAO

Disclaimer

The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.

[Alexander Schwartz]

Hello Jan,

In Keycloak 26.2, there was a new version of the feature v2 that was then fully supported, while the v1 version of the feature was preview. 

You can revert to the v1 version of the feature as described here: https://www.keycloak.org/server/features

There is no automatic migration, but only a manual migration. I still encourage you to migrate, as the v1 version of the feature will eventually be removed. 

The https://www.keycloak.org/2025/05/fgap-kc-26-2 for the announcement, and https://www.keycloak.org/docs/latest/upgrading/index.html#fine-grained-admin-permissions-supported for the migration docs. 

Best,

Alexander

--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/keycloak-user/CAA56YiJ_sKdws65zhOTcP2WKjevtWjQMZYQywF2nvJCdf9thkQ%40mail.gmail.com.

--

Alexander Schwartz, RHCE

He/Him

Principal Software Engineer, Keycloak Maintainer

alexander...@ibm.com

IBM Data Privacy Statement 

IBM Deutschland Research & Development GmbH

Vorsitzender des Aufsichtsrats: Wolfgang Wendt

Geschäftsführung: David Faller

Sitz der Gesellschaft: Böblingen / Registergericht: Amtsgericht Stuttgart, HRB 243294

[Jan Groenewald]

Thank you Alexander,

That is great. Is it possible to run v1 and v2 at the same time (one one realm or on different realms)?

Regards,

Jan