Subject area
Groups
Groups as role bundles with members: create them, maintain members, the default group, reconciliation with Keycloak and how groups interact with dynamic tenants.
Topics in this subject area
- 1.What a group is
A bundle of realm roles and client roles with members, managed by CIAS, kept in Keycloak as a marked copy.
- 2.Manage groups and members
Create, change, delete, add and remove members, take over existing Keycloak groups.
- 3.The default group
Which group every new person gets automatically, and why this only applies to new accounts.
- 4.Reconciliation with Keycloak
How the sync state PENDING/SYNCHRONIZED comes about and when reconciliation runs.
- 5.Group roles under dynamic tenants
Why client roles granted globally, including those from groups, do not apply under a dynamic tenant that has roles of its own, and how to plan groups accordingly.