Disable impersonation of a group, or for a realm within KeyCloak?
KeyCloak question for everyone.
Is it possible to disable impersonation of a group (for example, an admin group), or for a realm (the admin management console)?
You can assign impersonation role for a user from
Client Rolesof the realm.
Each realm has a built-in client called
realm-management. This client defines client-level roles that specify permissions that can be granted to manage the realm.
You can find more on available roles from Keycloak docs
Once you remove
impersonationclient-level role for your realm , it is not available for all users of the realm.