Permissions

By default, Phrasea offers 2 privileged roles:

• Super Admin which can do anything
• Admin which can do some things on some services

To be a Super Admin, you can:

• be a user with the super-admin role (defined in Keycloak)
• have an access_token with scope super-admin

To be an Admin, you can:

• be a user with the admin role (defined in Keycloak)
• be a user with the <service>-admin role (defined in Keycloak). This role will limit the user to be an admin only in this <service>