Design group related role #41

Closed
opened 2025-09-22 09:30:30 +00:00 by hurui200320 · 1 comment
Member

Currently in keycloak, role and groups are seperated. However, for CleverBRAG, according to Drew, we need to put roles under certain group, making roles being part of a group. This ticket should figure out how to do that keycloak.

Note: assuming keycloak cannot proxy role and group info from 3rd party im service, the code should have some space for future extension

Currently in keycloak, role and groups are seperated. However, for CleverBRAG, according to Drew, we need to put roles under certain group, making roles being part of a group. This ticket should figure out how to do that keycloak. Note: assuming keycloak cannot proxy role and group info from 3rd party im service, the code should have some space for future extension
hurui200320 added this to the V.01 milestone 2025-09-22 09:30:30 +00:00
Author
Member

Instead of group related roles, we got a solution using a abstraction layer, so keycloak can be used as an external storage for the roles: https://wiki.cleverthis.com/en/architecture/microservices/auth-service-authz-abstraction

Instead of group related roles, we got a solution using a abstraction layer, so keycloak can be used as an external storage for the roles: https://wiki.cleverthis.com/en/architecture/microservices/auth-service-authz-abstraction
hurui200320 2025-09-29 07:19:05 +00:00
Sign in to join this conversation.
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: clevermicro/user-management#41
No description provided.