# How to have a group with User and Admin only?

**URL:** <https://forum.keycloak.org/t/how-to-have-a-group-with-user-and-admin-only/4727>\
**Category:** Miscellanaeous\
**Tags:** authentication\
**Created:** [September 4, 2020, 9:34pm UTC](https://forum.keycloak.org/t/how-to-have-a-group-with-user-and-admin-only/4727 "2020-09-04T21:34:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Abhinav](https://avatars.discourse-cdn.com/v4/letter/a/e495f1/32.png) [@Abhinav](https://forum.keycloak.org/u/Abhinav)\
**Post date:** [September 4, 2020, 9:34pm UTC](https://forum.keycloak.org/t/how-to-have-a-group-with-user-and-admin-only/4727/1 "2020-09-04T21:34:04Z")

</div>

I need to create a groups which have respective admins. These admins for their own group are responsible for adding members in their group. Is this feasible? If so how can I achieve it? I tried my hand at fine grain permissions but that didn’t work out. I am still able to create users in X group when I am passing a jwt of an admin in Y group. Since the role is admin the endpoint allows it, I thought keycloak will give me an error that the admin can not create a user in X group since the admin belongs to Y group.