There are two types of users in Keycloak: security users and standard users.
- The security user is created during deployment and, by default, has full access to the VSP One Object realm in Keycloak, the Swagger API, and any third-party apps included with your system.
- You can then add standard users and assign them roles or groups to control their level of access.
Roles
Roles define what actions a user can perform within the system. You can view all available roles by clicking Clients in the navigation pane, selecting vsp-object-client from the Client ID column, and opening the Roles tab. To see the roles assigned to a user, go to their account and open the Role mapping tab.
Groups
Groups are used to organize users and apply shared permissions. You can view all available groups by clicking Groups in the navigation pane. To see the groups assigned to a user, go to their account and open the Groups tab.