AW Groups

Create Adventure Works Groups in Keycloak ..

Keycloak Groups

Groups in Keycloak represent organizational structure. When users belong to groups, they automatically get the roles assigned to those groups. This makes user management scalable—when someone joins the Sales team, you add them to the Sales group and they automatically get all sales-related permissions.

This is the WHO ..

Data Catalog Realm

A Realm in Keycloak is an isolated administrative domain that manages a complete set of users, credentials, roles, and groups. Think of it as a tenant or security boundary that contains everything needed to authenticate and authorize users for a specific organization or application.

PDC is already configured to authenticate against this realm. The client / realm configuration, mappers, and authentication flows are already set up.

Organization

Business Unit

Business Groups

AdventureWorks_Organization

Sales_Division

Sales_Managers Sales_Analysts

HR_Division

HR_Managers

HR_Specialist

Data_Governance

Data_Stewards Compliance_Officers

IT_Operations

System_Administrators

Log into Keycloak:

Username: admin

Password: admin

Ensure you select the Pentaho Data Catalog Realm.

Select: Groups > Create Group:

Enter Name: "AdventureWorks_Organization".

Click Save
Select "AdventureWorks_Organization"
Click on the dots to the right: "Create child group"

Enter the Name: "Sales_Division".
Repeat the workflow to create the other Adventure Works groups.

Then repeat again for each child 'Business Unit' - refer to the table at the top:

With the Adventure Works organization business units now mapped into Keycloak, we can now turn our attention to Roles & Attributes.

PreviousPDC JWT Token NextAW Roles & Attributes

Last updated 3 days ago

Was this helpful?