AW Users

in Keycloak, group membership is not automatically inherited upward through the group hierarchy. If you add a user to the deepest child group, they will only be a direct member of that specific group.

However, the user will inherit all the roles and attributes that are assigned to the parent groups in the hierarchy. So while they won't show up as explicit members of the main group and first child group, they will effectively have all the permissions and attributes from those parent groups.

Group Membership:

• User is only a direct member of the deepest child group

• User does not appear in the member lists of parent groups

Role/Attribute Inheritance:

• User inherits all roles assigned to the deepest child group

• User also inherits all roles assigned to the parent child group

• User also inherits all roles assigned to the main group