Keycloak: create and update users and restrict delete user using admin REST APIs

Getting advice
1

Keycloak version 24+
In keycloak How can we strict client service account roles to just view, create and update users using REST APIs? Delete user shouldn’t be allowed.
Keycloak default has manage-users role which includes delete users as well. There is no separate role for create and update user. Tried to check scope based roles, but there is also no scope available for create and update.

2

I think you can handle this with a custom user storage provider spi. Then you can change the delete behavior.

3

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.