Default (Client) Roles

[jcharlytown]

Hi,

first of all thanks everyone for making this provider happen. This makes managing keycloak realms so much easier!

However, I was wondering if there is a functionality to set default roles on a realm, specifically client roles? Using the security console this is possible via "Roles" -> "Default Roles". In case of client roles, on the API level this seems to be a field within the client representation, similar to default client scopes.

Is there such a functionality already included in this project and i'm just missing it? If not, are there any plans to implement such a feature?

Thanks!

[paulvollmer]

hello, someone working on that feature? if not, then i can work on that.

/cc @mrparkers

[mrparkers]

@paulvollmer feel free to pick it up if you want to work on it, I appreciate the help!

[duc12597]

+1 for default realm roles

[paulvollmer]

@mrparkers i started working on that.

[ringods]

Hello @paulvollmer, were you able to make any progress on this? I'm interested in this feature as well.

[arkadiusjonczek]

Hey guys, I started working on this (realm default roles without client roles atm). You can use composite roles on existing default roles as workaround.

[ringods]

Hello @arkadiusjonczek, were you able to make some progress on this? Even if you have something incomplete, could you already submit this as a draft PR?

[Vlad-Kirichenko]

Hi all. I started working on this(realm default roles). PR will be created soon.

[ghost]

Hi guys. As a temporary workaround one can use keycloak_default_groups. You can just create a group that has all the role mappings you want as default and then make the group default for every (new) user

[arkadiusjonczek]

This issue could be closed with #599 @mrparkers

[mrparkers]

Hey @arkadiusjonczek, #599 added a new resource for default realm roles, but we still don't have a first class solution for default client roles. Until then, I'll leave this open, and users can use the helpful solution proposed by @ScrumplexDTAG.

Thanks!