# What realm specific role is needed to assign role(s) to a user?

**URL:** <https://forum.keycloak.org/t/what-realm-specific-role-is-needed-to-assign-role-s-to-a-user/395>\
**Category:** Securing applications\
**Tags:** admin-console\
**Created:** [November 12, 2019, 9:46pm UTC](https://forum.keycloak.org/t/what-realm-specific-role-is-needed-to-assign-role-s-to-a-user/395 "2019-11-12T21:46:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![fredericfaddaIBM](https://avatars.discourse-cdn.com/v4/letter/f/67e7ee/32.png) [@fredericfaddaIBM](https://forum.keycloak.org/u/fredericfaddaIBM)\
**Post date:** [November 12, 2019, 9:46pm UTC](https://forum.keycloak.org/t/what-realm-specific-role-is-needed-to-assign-role-s-to-a-user/395/1 "2019-11-12T21:46:04Z")

</div>

Hi there,  
I’m quite new at Keycloak.  
My customer wants to use admin delegation; i.e.: one user is admin of a realm and can manage the users in this realm.  
I’m testing this but I’m a bit locked when trying to do so.  
Let me explain:

1. User A is admin on “master” realm
2. He creates another realm (“realm01”).
3. He creates a user B on this realm01 with client roles on realm01 “manage-authorization”, “manage-users” and “view realm”.
4. User B connects to realm01 and is able to create new users BUT can assign any role to the new users (“Role Mappings” tab is forbidden).  
Is there a way to provide User B the rights (role?) to assign roles to users on a realm he manages?

Or maybe using realms isn’t the appropriate way? Is this feasible with groups?  
Thanks in advance for your help.