ERAS Role Management ‐ Keycloak - JU-DEV-Bootcamps/ERAS GitHub Wiki

Note: This wiki entry assumes basic knowledge of Keycloak realms and clients. In case of doubt, please review Keycloak documentation.

ERAS Clients

ERAS clients reside in the general Jalasoft Keycloak realm. There is one client for the frontend application (eras) and one for the backend API (ERAS-API). For further details on URLs and other configurations, please contact the technical leader of the team.

ERAS Roles

As part of the role management implementation, three roles have been defined for the ERAS application:

• ERAS Administrator: Full application access.
• ERAS Students Service Officer: Access to Students, Evaluation Processes, Reports, Assessments, and Interventions.
• ERAS Professional: Access to own Assessments and Interventions.

These roles should exist in both ERAS clients.

Role assignment

Every user of the application should have a role assigned. This role should be the same for both the frontend and the backend clients.

For local environments role assignment, please refer to Keycloak Role Assignment and Creation wiki entry

For development, staging and production environment role assignment, please create an IT ticket for the realm administrators to add the specific role to the users.