Why does the Keycloak UI not show the UMA authorization policies

Getting advice
1

When I add a UMA policy to a resource as follows, the policy functions correctly (The test evaluation works), however, I cannot see the created policy in the list of policies or permissions in the “Authorization” tab for the client in question.

curl -k -X POST \
  https://localhost:8443/auth/realms/keycloaktest/authz/protection/uma-policy/<resource_uuid> \
  -H 'Authorization: Bearer <client_bearer_token>' \
  -H 'Cache-Control: no-cache' \
  -H 'Content-Type: application/json' \
  -d '{ "name": "test-user-policy", "description": "Allow test user to resource4", "users": ["testuser"] }'

I can see the policy when querying the policies for the resource… https://localhost:8443/auth/realms/keycloaktest/authz/protection/uma-policy?resource=<resource_uuid>

Is there a way I can see the set of UMA policies from the Keycloak UI?

Alternatively, can I add standard (non-UMA) policies from the REST API? I cannot find the documentation for it, and don’t want to reverse engineer in case it gets deprecated somehow…

2 Likes