Skip to content
Discover Logo Discover Docs

Role Management

All newly onboarded users receive the viewer role by default. Admins can promote users to higher-privilege roles from the Keycloak admin console.

Available Roles

Section titled “Available Roles”
RoleDescription
userRegular read/write access
client_adminTeam-level admin — can manage team members and settings

Assign a Role

Section titled “Assign a Role”

  1. Open the Users list

    In the Keycloak admin console, click Users in the left sidebar and find the user you want to update.

    Admin Panel Users Page

  2. Open their profile

    Click on the user’s name to open their profile page.

  3. Go to Role Mapping

    Select the Role mapping tab.

  4. Assign a role

    Click Assign role. In the dialog that opens:

    • Use the Filter by realm roles dropdown to show realm-level roles
    • Select the role you want to assign (e.g. super_admin or client_admin)
    • Click Assign

    Roles

The user’s permissions are updated immediately — no restart or re-login required.

Remove a Role

Section titled “Remove a Role”

To downgrade a user’s role, go to their Role mapping tab, select the role you want to remove, and click Unassign.