Disable impersonation of a group, or for a realm within KeyCloak?

KeyCloak question for everyone.

Is it possible to disable impersonation of a group (for example, an admin group), or for a realm (the admin management console)?

Thx

1 answer

  • answered 2018-03-13 20:29 ravthiru

    You can assign impersonation role for a user from Client Roles of the realm.

    Each realm has a built-in client called realm-management. This client defines client-level roles that specify permissions that can be granted to manage the realm.

    You can find more on available roles from Keycloak docs

    Once you remove impersonation client-level role for your realm , it is not available for all users of the realm.