adorsys / adorsys/keycloak-config-cli

Fully support FGAP V2

Open
#1,659 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
1.2k
Forks
200
PR merge metrics
No merged PRs in 30d

Description

### Problem Statement

Hi all,

If I am understanding it correctly, kcc is currently not able to import policies & permissions since they are configured for the "admin-permissions" client.

The endpoints for creating and updating policies and permissions do exist, e.g.:
Create Permission:
`POST /admin/realms/{realm}/clients/{client-uuid}/authz/resource-server/permission/scope`

Create Group Policy:
`POST /admin/realms/{realm}/clients/{client-uuid}/authz/resource-server/policy/group`

Create Aggregated Policy:
`POST /admin/realms/{realm}/clients/{client-uuid}/authz/resource-server/policy/aggregate`

Create Role Policy:
`POST /admin/realms/{realm}/clients/{client-uuid}/authz/resource-server/policy/role`

Are there plans to implement this feature?

### Proposed Solution

Add `permissions` and `policies` sections in the configuration for creating permissions and policies.

### Alternatives considered

```markdown

```

### Use-case context

```markdown
Configure permissions and policies for import in keycloak.
```

### Environment

- Keycloak Version: 26.6.2
- keycloak-config-cli Version: 6.5.0
- Java Version: 25

### Additional information

_No response_

### Acceptance Criteria

- Accept `permissions` section in configuration
- Accept `policies` section in configuration

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.