Fine Grained Admin Permissions (FGAP) in Keycloak
September 8, 2026
Tags: #keycloak #admin #permissions #fgap #authorization
Delegating admin rights in Keycloak has always been coarse-grained: hand someone manage-users and they can manage every user in the realm. Fine Grained Admin Permissions change that — you can now define exactly who may manage which users, groups, clients and roles, and what they’re allowed to do with them.
In this video:
👉 Where the classic realm-management roles fall short
👉 Enabling Admin Permissions for a realm
👉 How the admin-permissions client, its resources, scopes and policies fit together
👉 Hands-on: a group admin who can manage only the members of their own group