keycloak-scim/server_admin/topics/roles-groups/con-comparing-groups-roles.adoc

9 lines
720 B
Text

[id="con-comparing-groups-roles_{context}"]
= Groups compared to roles
[role="_abstract"]
Groups and roles have some similarities and differences. In {project_name}, groups are a collection of users to which you apply roles and attributes. Roles define types of users and applications assign permissions and access control to roles.
<<_composite-roles,Composite Roles>> are similar to Groups as they provide the same functionality. The difference between them is conceptual. Composite roles apply the permission model to a set of services and applications. Use composite roles to manage applications and services.
Groups focus on collections of users and their roles in an organization. Use groups to manage users.