# Achieving Fine-Grained Admin Permissions with Keycloak 26.2

DevFeed: [Achieving Fine-Grained Admin Permissions with Keycloak 26.2](<https://devfeed.tech/articles/achieving-fine-grained-admin-permissions-with-keycloak-26-2-31704.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2025/05/fgap-kc-26-2>)

Author: Vlasta Ramik

Published: 2025-05-14T00:00:00Z

Content type: tutorial

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [audit](<https://devfeed.tech/topics/audit.md>), [Security](<https://devfeed.tech/topics/security.md>), [console](<https://devfeed.tech/topics/console.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [admin](<https://devfeed.tech/tags/admin.md>), [administration](<https://devfeed.tech/tags/administration.md>), [audit](<https://devfeed.tech/tags/audit.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [console](<https://devfeed.tech/tags/console.md>), [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [policies](<https://devfeed.tech/tags/policies.md>), [saml](<https://devfeed.tech/tags/saml.md>), [scopes](<https://devfeed.tech/tags/scopes.md>), [security](<https://devfeed.tech/tags/security.md>), [sso](<https://devfeed.tech/tags/sso.md>)

## AI overview

This article introduces Fine-Grained Admin Permissions V2 in Keycloak 26.2. It explains how FGAP V2 supports delegated administration and more granular management of users, clients, groups, and roles within a realm, with centralized permission management in the Admin Console.

## Source excerpt

For years, Role-Based Access Control (RBAC) has been the cornerstone of authorization in many applications. Assigning users to roles provides a simple and effective way to manage access for common use cases. However, as applications become more complex and security requirements more demanding, RBAC alone often falls short. Keycloak is leveling up administrative access control with the release of Fine Grained Admin Permissions V2 a major step towards introducing delegated administration to Keycloak so that server administrators can assign management privileges to other users in a realm. By doing that, you should be able to reduce management costs and effort, and improve the overall efficiency and security of your deployments by authorizing access to specific resources in a realm. Why Fine-Grained Admin Permissions (FGAP) V2? In previous Keycloak versions, administrative access was largely driven by broad roles such as realm-admin or manage-users. While effective for simple setups, these roles often granted more access than necessary and lacked clarity around which actions they allowed. FGAP V2 introduces a cleaner, more deliberate permission model that enables: Granular access control over users, clients, groups, and roles Clear boundaries between operations--no more implicit permissions Easier management of the permissions and policies Better evaluation mechanism to allow authorization administrators audit the model ✨ Key Highlights 🧭 Centralized Permissions Management A new Permissions section in the Admin Console provides a single place to view and manage all fine-grained permissions for a realm. This simplifies navigation and makes it easier to design and audit your permission model. 🔍 Improved Manageability and Evaluation Permissions are now easier to discover, filter, and evaluate. You can inspect which scopes are assigned to which identities--making it more transparent and manageable to build tailored administrative roles. 🎯 Resource-Specific and Global Permissi