How can I create a client_credential account in to be able to perform administrative tasks?

Question

I'm trying to achieve the same exact thing of this user but using a client with client_credentials

I've followed this post to create my client with client credentials grant and so I can get the access token like this

but when I try to call the execute-action-email api I only get an error 401

what am I missing?

Answer 1

Try to get the token from a user with the correct permissions for instance the master admin:

curl -k -sS     -d "client_id=admin-cli"
                -d "username=$ADMIN_NAME"
                -d "password=$ADMIN_PASSWORD"
                -d "grant_type=password"
                http://$KEYCLOAK_IP/auth/realms/master/protocol/openid-connect/token)

Alternatively, what you can do is:

• Create a new client you the master Realm;
• Configured as with grant type client credentials;
• Go to Mappers;
• Click on [Create]
• As Mapper Type select "Hardcoded Role"
• Click on Select Role and selection "admin"
• Save;
• Ask a token using the newly created client.