Hi Simon,
In Keycloak there is a way to create a 'bootstrap' administrator user (a user that belong do Administrator group) that is automatically recognised as oVirt admin.
Typically, you want to use that user to assign permissions in oVirt Administrator panel[1]. I suspect that is what you really wanted to ask for.

To directly answer your question. Any Keycloak user that does not belong to Administrator group is treated a 'regular' oVirt user (without any specifi permissions).

[1] https://www.ovirt.org/documentation/administration_guide/index.html#sect-Roles

I hope this helps a bit.

Artur

pon., 20 mar 2023 o 22:40 <simon@justconnect.ie> napisaƂ(a):
I'm trying to create a user/group that doesn't have full admin permissions.
Does this capability exist with keycloak for the oVirt environment?
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/72LVXUVNXGFLYDZROQZOL77QJQ22QLF7/