libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

Matthew Helmke edits for Red Hat writing assessment

Browse source
This commit is contained in:
Matthew Helmke 2017-09-14 10:51:32 -05:00
parent 4cb5b9dd2d
commit 3768ac21f8
1 changed files with 17 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
server_admin/topics/realms/master.adoc
View file

@ -1,15 +1,23 @@
=== The Master Realm === The Master Realm
When you boot {project_name} for the first time a pre-defined realm is created for you. This initial realm is called When you boot {project_name} for the first time {project_name} creates a
the _master_ realm and is the king of all realms. Admins in this realm have permissions to view and manage any pre-defined realm for you. This initial realm is the _master_ realm. It is the
other realm created on the server instance. When you define your initial admin account, you are creating an account in the _master_ realm. highest level in the hierarchy of realms. Admin accounts in this realm have
Your initial login to the admin console will also be through the _master_ realm. permissions to view and manage any other realm created on the server instance.
When you define your initial admin account, you create an account in the
_master_ realm. Your initial login to the admin console will also be via the
_master_ realm.
It is recommended that you do not use the _master_ realm to manage the users and applications in your organization. Keep the _master_ realm Red Hat recommends that you do not use the _master_ realm to manage the users
as a place for _super_ admins to create and manage the realms in your system. This keeps things clean and organized. and applications in your organization. Reserve use of the _master_ realm for
_super_ admins to create and manage the realms in your system. Following this
security model helps prevent accidental changes and follows the tradition
of permitting user accounts access to only those privileges and powers necessary
for the successful completion of their current task.
It is possible to disable the _master_ realm and define admin accounts at each individual new realm you create. Each realm has its own It is possible to disable the _master_ realm and define admin accounts within
dedicated Admin Console that you can log into with local accounts. This guide talks more about this in the each individual new realm you create. Each realm has its own dedicated Admin
<<_per_realm_admin_permissions, Dedicated Realm Admin Consoles>> Console that you can log into with local accounts. This guide talks more about
this in the <<_per_realm_admin_permissions, Dedicated Realm Admin Consoles>>
chapter. chapter.