Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

When restoring the default configuration, the script will also update StudioService.exe.config to set the correct authority url  for the newly created realm and client secret for the studio-server cllient.

Managing Users & Groups & Roles

Group & Roles

Note

Keycloak groups and roles only have effect in the Studio if you are using the oidc security mode and add a RoleMapping to map the Keycloak role to a Studio role

Adding

...

and removing groups and roles in Keycloak is relatively straightforward, from the navigation select either Roles or Groups, and the main view will list all roles or groups. From this view you can add, edit or delete roles or groups.

Users can be added to multiple groups, and they can be assigned multiple roles.

Roles can also be assigned to groups, effectively assigning those roles to all members of the group.

Ultimately it is the roles a user has in Keycloak (either directly or via groups it is a member of) that will determine which roles (and permissions) the user has in the Studio.

Which Studio role a user has based on the given Keycloak roles is determined in the Studio configuration via the role mappings. See Studio Security Modes for how to configure that.

The Studio role in turn will determine which permissions a user has in the Studio. See User access and management for more information on Studio roles and permissions.

Users

...


User Federation: NTLM

User Federation: Kerberos