adorsys / adorsys/keycloak-config-cli
Fully support FGAP V2
- Dominant language
- Java
- Stars
- 1.2k
- Forks
- 200
- PR merge metrics
- No merged PRs in 30d
Description
### Problem Statement
Hi all,
If I am understanding it correctly, kcc is currently not able to import policies & permissions since they are configured for the "admin-permissions" client.
The endpoints for creating and updating policies and permissions do exist, e.g.:
Create Permission:
`POST /admin/realms/{realm}/clients/{client-uuid}/authz/resource-server/permission/scope`
Create Group Policy:
`POST /admin/realms/{realm}/clients/{client-uuid}/authz/resource-server/policy/group`
Create Aggregated Policy:
`POST /admin/realms/{realm}/clients/{client-uuid}/authz/resource-server/policy/aggregate`
Create Role Policy:
`POST /admin/realms/{realm}/clients/{client-uuid}/authz/resource-server/policy/role`
Are there plans to implement this feature?
### Proposed Solution
Add `permissions` and `policies` sections in the configuration for creating permissions and policies.
### Alternatives considered
```markdown
```
### Use-case context
```markdown
Configure permissions and policies for import in keycloak.
```
### Environment
- Keycloak Version: 26.6.2
- keycloak-config-cli Version: 6.5.0
- Java Version: 25
### Additional information
_No response_
### Acceptance Criteria
- Accept `permissions` section in configuration
- Accept `policies` section in configuration
Contributor guide
Assessment
This issue has not been assessed yet.