Skip to content

Realm-level admininistrators can no longer use Admin Console since 26.3.0 (UI fails to render) #45116

@MaxCsr

Description

@MaxCsr

Before reporting an issue

  • I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

admin/ui

Describe the bug

Starting with Keycloak 26.3.0, a realm-level administrator (user with the realm-admin role in a non-master realm) can no longer use the realm-specific Admin Console.

After authenticating directly against the realm-level console URL (e.g. /admin/<realm>/console/#/), the UI becomes largely unusable: most components do not render correctly and the web console is effectively non-functional.
Image

This workflow worked as expected in 26.2.5 and earlier versions: realm-level administrators were able to access the realm-specific admin console to perform maintenance tasks.

From 26.3.0 through 26.4.7 (latest at time of reporting), realm-level administration appears to be possible only by signing into the master realm Admin Console with a server administrator account and switching to the target realm, which is a functional regression for delegated realm administration.

Version

26.4.7

Regression

  • The issue is a regression

Expected behavior

A user with realm-level administrative permissions (e.g., realm-admin in realm Test) should be able to:

  1. Navigate to the realm-specific Admin Console endpoint: http://localhost:8080/admin/Test/console/#/
  2. Authenticate successfully
  3. Use a fully rendered, functional Admin Console UI for that realm (as in 26.2.5 and earlier)

Actual behavior

After logging in to the realm-level Admin Console (/admin/<realm>/console/#/) as the realm admin user:

  • The Admin Console UI is broken / mostly not rendered
  • Navigation and UI components are not usable
  • The console cannot be used to perform administrative tasks from the realm-level entry point

How to Reproduce?

  1. Install Keycloak 26.3.0+
  2. Create a realm named Test
  3. Create a new user in realm Test and grant them the realm-admin role
  4. Open the realm-level Admin Console URL, for example: http://localhost:8080/admin/Test/console/#/
  5. Log in as the realm-level administrator created in step 3

Observe: the Admin Console UI does not render correctly and is not usable.

Anything else?

No response

Metadata

Metadata

Assignees

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions