How to use client to post the realm role in Keycloak?

user_6000593 0
Viewed 385

I have created a client in keycloak and configure it access type to "confidential".

I can use REST API protocol/openid-connect/token with clientId and client secret to get the access token for this this client.

In my design, there is a use case that I need to use the client access token to post a role in its Realm (the role needs to belong to realm, not this client). Then I can see the post request is denied. I have configured the scope of this client to full scope but it doesn't help.

Any idea whether this is possible? If yes, what configs I need for this client?

keycloak-rest-api keycloak roles
1 Answers

Try the following:

  1. To go Realm > Clients and select your client;
  2. Switch Service Accounts Enabled to ON, and click [SAVE];
  3. Switch to Service Accounts Roles tab;
  4. From the Client Roles dropdown menu select the realm-management client
  5. Select realm-admin, and click Add Selected and tried it out.
user_13668710
Related