Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feature: Allow enabling RBAC for tenants creation through API #18

Merged
merged 5 commits into from
Jan 24, 2024

Conversation

anarsultanov
Copy link
Owner

@anarsultanov anarsultanov commented Jan 20, 2024

Introduce the requiredRoleForTenantCreation realm attribute to restrict tenant creation in Keycloak to users with a specified client role.

Usage

Configure the requiredRoleForTenantCreation attribute by specifying the client role that should be permitted to create tenants. This can be done via Keycloak's REST API using the PUT /admin/realms/{realm} endpoint.

Behavior

  • If Configured: Tenant creation is limited to users who have the specified client role. This restriction does not affect create-tenant required action if it is configured.
  • If Not Configured: Tenant creation is allowed for all authenticated users, ensuring backward compatibility.

Closes #13

@anarsultanov anarsultanov changed the title feature: Allow enabling RBAC for tenants creation using API feature: Allow enabling RBAC for tenants creation through API Jan 20, 2024
@anarsultanov anarsultanov merged commit dddef01 into main Jan 24, 2024
2 checks passed
@anarsultanov anarsultanov deleted the tenant-creation-rbac branch January 24, 2024 19:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Enhancement Request: Implement Role-Based Access Control for Tenant Creation Endpoint
1 participant