keycloak - 在 Keycloak 预览模式下按组进行用户管理

Question

My requirement is as follows,

• KeyCloak has a Admin user which is not restricted in any way.
• We have multiple groups in keycloak and every group has its own group admin. For example for Group A and B, the admin is A-admin and B-admin respectively and so on.
• The group admins have the privilege to view, add, update and delete users of the respective group.
• One group admin has not the rights to see other group member users.
• An additional requiremnent which I think is immposible to restrict the group admin to modify the single attribute of the user.

I already got success in implementing functionality which restrict the group admin exposure to edit their own users but they can not add new user and also they can view other group members but cannot edit. Any help would be appreciated.

标签： keycloakuser-management