Manage User Permissions

User Management
Manage OpenRMF® Professional user permissions across system packages and team subpackages.
Synchronize User Permissions

Synchronize the Keycloak group permissions for system packages and team subpackages to the newer internal security management format. This will ensure that the latest user permissions are applied across the application. This only has to be done once.

From then on, you manage user permissions within the internal security management system using this User Permissions screen.

Available Users
Loading...
Login First Name Last Name Email
Synchronize User Permissions

When you synchronize the user permissions from Keycloak to the internal security settings, all user interactions will use the new User Permissions model. You must manage the User Permissions through this page only, not Keycloak from here forward. Only high level application Roles will be assigned in Keycloak.

The following user permissions data is fully synchronized:

  • Username
  • User Id, First, and Last Name
  • All available system package security groups
  • All available team subpackage security groups
  • The user permissions for each user and each system package and team subpackage group currently assigned

Please ensure no one is currently using the application as this can interrupt security settings, performance, and feature usage.

This will take a few minutes to finalize. Please let it run to completion. And check application logs for any errors or warnings.

Check Orphaned Users

This can be run at any time after you delete a user in Keycloak directly without first removing their user permissions in this application area.

When you check for orphaned users, any user permissions internally that are saved here which do not match a valid Keycloak user are removed.

All users listed remain the same as that is pulled from the Keycloak listing live. And all their permissions are left alone.

This will take a few minutes to finalize. Please let it run to completion. And check application logs for any errors or warnings.