keycloak-scim/server_admin/topics/roles.adoc
2021-09-21 08:58:46 +02:00

14 lines
960 B
Text

== Roles and Groups
A role typically applies to one type of user. Typical roles in an organization include `Admin`, `user`, `manager`, and `employee`. An application can assign access and permissions to a role and then assign multiple users to that role so the users share the same access and permissions. For example, the Admin Console has roles that give permission to users to access parts of the Admin Console.
There is a global namespace for roles and each client also has its own dedicated namespace where roles can be defined.
include::roles/proc-creating-realm-roles.adoc[]
include::roles/con-client-roles.adoc[]
include::roles/proc-converting-composite-roles.adoc[]
include::roles/proc-assigning-role-mappings.adoc[]
include::roles/con-default-roles.adoc[]
include::roles/con-role-scope-mappings.adoc[]
include::roles/proc-managing-groups.adoc[]
include::roles/con-comparing-groups-roles.adoc[]
include::roles/proc-specifying-default-groups.adoc[]