# Disable Admin Console

**URL:** <https://forum.keycloak.org/t/disable-admin-console/29460>\
**Category:** Miscellanaeous\
**Created:** [January 22, 2025, 11:45am UTC](https://forum.keycloak.org/t/disable-admin-console/29460 "2025-01-22T11:45:20Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kib](https://avatars.discourse-cdn.com/v4/letter/k/7ba0ec/32.png) [@Kib](https://forum.keycloak.org/u/Kib)\
**Post date:** [January 22, 2025, 11:45am UTC](https://forum.keycloak.org/t/disable-admin-console/29460/1 "2025-01-22T11:45:20Z")

</div>

How can I completely disable the admin console? I don’t want to use it, and I want to ensure no one else has access to it either.

---

<div class="post-metadata">

**Author:** ![skydrinker-tox](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/skydrinker-tox/32/9789_2.png) [@skydrinker-tox](https://forum.keycloak.org/u/skydrinker-tox)\
**Post date:** [January 23, 2025, 5:32am UTC](https://forum.keycloak.org/t/disable-admin-console/29460/2 "2025-01-23T05:32:49Z")

</div>

I don’t think you can “disable” it. But, with the usage of a reverse proxy, you can block every incomming network requests to “/admin” so it can’t be accessed.

---

<div class="post-metadata">

**Author:** ![dasniko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dasniko/32/2969_2.png) [@dasniko](https://forum.keycloak.org/u/dasniko)\
**Post date:** [January 23, 2025, 6:24am UTC](https://forum.keycloak.org/t/disable-admin-console/29460/3 "2025-01-23T06:24:58Z")

</div>

Well, basically you can disable all the `security-admin-console` clients in all of the realms. But wouldn’t vote for it.  
I have several customers who also had this initial “requirement” (“wish” would describe it better) and wanted to do all and everything through the API, but sooner or later they had the requirement to access the `master` realm through the console. So I would never disable it on `master`, because at some time in your KC life, you will need it.

---

<div class="post-metadata">

**Author:** ![skydrinker-tox](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/skydrinker-tox/32/9789_2.png) [@skydrinker-tox](https://forum.keycloak.org/u/skydrinker-tox)\
**Post date:** [January 24, 2025, 5:33am UTC](https://forum.keycloak.org/t/disable-admin-console/29460/4 "2025-01-24T05:33:33Z")

</div>

> [@dasniko](#):
>
> So I would never disable it on `master`, because at some time in your KC life, you will need it.

I wanted to write something like this in my answer, but lazyness got me 😅

---

<div class="post-metadata">

**Author:** ![edewit](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/edewit/32/287_2.png) [@edewit](https://forum.keycloak.org/u/edewit)\
**Post date:** [January 27, 2025, 12:33pm UTC](https://forum.keycloak.org/t/disable-admin-console/29460/5 "2025-01-27T12:33:14Z")

</div>

I never tried it, but I think you can remove the `./lib/lib/main/org.keycloak.keycloak-admin-ui-<version>.jar`