Fine Grained Admin Permissions (FGAP) in Keycloak

September 8, 2026

Tags: #keycloak #admin #permissions #fgap #authorization

Delegating admin rights in Keycloak has always been coarse-grained: hand someone manage-users and they can manage every user in the realm. Fine Grained Admin Permissions change that — you can now define exactly who may manage which users, groups, clients and roles, and what they’re allowed to do with them.

In this video:
👉 Where the classic realm-management roles fall short
👉 Enabling Admin Permissions for a realm
👉 How the admin-permissions client, its resources, scopes and policies fit together
👉 Hands-on: a group admin who can manage only the members of their own group

« Keycloak DevDay 2027 - Save the date! Keycloak Workflows - Identity Governance & Administration (IGA) »