keycloak-scim/server_admin/topics/realms/master.adoc

15 lines
1 KiB
Text
Raw Normal View History

2016-05-13 14:41:36 +00:00
=== The Master Realm
2017-08-28 12:50:14 +00:00
When you boot {project_name} for the first time a pre-defined realm is created for you. This initial realm is called
2016-05-13 14:41:36 +00:00
the _master_ realm and is the king of all realms. Admins in this realm have permissions to view and manage any
other realm created on the server instance. When you define your initial admin account, you are creating an account in the _master_ realm.
Your initial login to the admin console will also be through the _master_ realm.
It is recommended that you do not use the _master_ realm to manage the users and applications in your organization. Keep the _master_ realm
as a place for _super_ admins to create and manage the realms in your system. This keeps things clean and organized.
It is possible to disable the _master_ realm and define admin accounts at each individual new realm you create. Each realm has its own
2016-06-01 01:44:13 +00:00
dedicated Admin Console that you can log into with local accounts. This guide talks more about this in the
2017-08-28 12:50:14 +00:00
<<_per_realm_admin_permissions, Dedicated Realm Admin Consoles>>
2016-05-13 14:41:36 +00:00
chapter.