# Role mapping of admin user in realm "master" does not contain "create-realm"

**URL:** <https://forum.keycloak.org/t/role-mapping-of-admin-user-in-realm-master-does-not-contain-create-realm/29998>\
**Category:** Miscellanaeous\
**Created:** [May 14, 2025, 4:35pm UTC](https://forum.keycloak.org/t/role-mapping-of-admin-user-in-realm-master-does-not-contain-create-realm/29998 "2025-05-14T16:35:44Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![nluetic](https://avatars.discourse-cdn.com/v4/letter/n/7bcc69/32.png) [@nluetic](https://forum.keycloak.org/u/nluetic)\
**Post date:** [May 14, 2025, 4:35pm UTC](https://forum.keycloak.org/t/role-mapping-of-admin-user-in-realm-master-does-not-contain-create-realm/29998/1 "2025-05-14T16:35:44Z")

</div>

I have set up keycloak, version 26.1.3, a while ago using docker compose, and added some realms as the admin user.

Now, a while later, I cannot create new realms any more, neither from the console nor using `kcadm.sh`.

When checking the role mappings of the admin user I do not see the “create-realm” role for realm “master”, which is needed, as I found out.

I tried creating a new admin user as described here:

> **[Bootstrapping and recovering an admin account](https://www.keycloak.org/server/bootstrap-admin-recovery#_create_an_admin_user)**
>
> Bootstrap Keycloak and recover access by creating a temporary admin account.

But this new user is also missing “create-realm”.

As a side note: When I enter one of my existing other realms (not “master”) one of them actually has “create-realm” as “realm role”. But I am not sure, what that even means, as I did not expect “create-realm” to be usable outside of “master”.

From the time it was possible to create realms until when it stopped working, the only thing I did were some updates and enabling the “organization” feature.

Do I just have some misunderstanding here? Or what am I doing wrong?
