0

I want to assign a custom role (ca_boarding_administrator_role) in the "Service Account Role" section using the Keycloak Admin REST API.

My client (cq-boarding-client) has the access type "confidential".

My goal is to have it available in the access_token under the realm_access.roles claim.

This documentation describes how to accomplish this in using the web UI. In my case I am trying to automate using the Admin REST API: https://www.keycloak.org/docs/latest/server_admin/index.html#_service_accounts

enter image description here

enter image description here

Florian Boehmak
  • 431
  • 4
  • 20

1 Answers1

3

By taking a closer look at the Keycloak Resource Models I realized that for each confidential Client also a User is created. By adding the desired role to the realmRoles attribute of the User does the trick.

enter image description here

In case anybody is interested, I included my nodejs script to automate it: service-account-role-mappings.js

For additional reference:

Florian Boehmak
  • 431
  • 4
  • 20