Keycloak

1
== Assigning permissions using roles and groups
2

3
Roles and groups have a similar purpose, which is to give users access and permissions to use applications. Groups are a collection of users to which you apply roles and attributes. Roles define specific applications permissions and access control.
4

5
A role typically applies to one type of user. For example, an organization may include `admin`, `user`, `manager`, and `employee` roles. An application can assign access and permissions to a role and then assign multiple users to that role so the users have the same access and permissions. For example, the Admin Console has roles that give permission to users to access different parts of the Admin Console.
6

7
There is a global namespace for roles and each client also has its own dedicated namespace where roles can be defined.
8

9
include::roles-groups/proc-creating-realm-roles.adoc[leveloffset=2]
10
include::roles-groups/con-client-roles.adoc[leveloffset=2]
11
include::roles-groups/proc-converting-composite-roles.adoc[leveloffset=2]
12
include::roles-groups/proc-assigning-role-mappings.adoc[leveloffset=2]
13
include::roles-groups/proc-using-default-roles.adoc[leveloffset=2]
14
include::roles-groups/con-role-scope-mappings.adoc[leveloffset=2]
15
include::roles-groups/proc-managing-groups.adoc[leveloffset=2]
16
include::roles-groups/con-comparing-groups-roles.adoc[leveloffset=3]
17
include::roles-groups/proc-specifying-default-groups.adoc[leveloffset=3]
18