# Keycloak Client Role Mappings API

**Canonical:** https://apis.io/apis/keycloak/keycloak-client-role-mappings-api/  
**Provider:** Keycloak — https://apis.io/providers/keycloak/  
**Documentation:** https://www.keycloak.org/docs-api/latest/rest-api/

Keycloak Client Role Mappings API is one of 23 APIs that [Keycloak](https://apis.io/providers/keycloak/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Client Role Mappings. The published artifact set on APIs.io includes an OpenAPI specification.

The Client Role Mappings API from Keycloak — 9 operation(s) for client role mappings.

## Operations (15)

| Method | Path | Summary |
|---|---|---|
| GET | `/admin/realms/{realm}/groups/{group-id}/role-mappings/clients/{client-id}` | Get client-level role mappings for the user or group, and the app |
| POST | `/admin/realms/{realm}/groups/{group-id}/role-mappings/clients/{client-id}` | Add client-level roles to the user or group role mapping |
| DELETE | `/admin/realms/{realm}/groups/{group-id}/role-mappings/clients/{client-id}` | Delete client-level roles from user or group role mapping |
| GET | `/admin/realms/{realm}/groups/{group-id}/role-mappings/clients/{client-id}/available` | Get available client-level roles that can be mapped to the user or group |
| GET | `/admin/realms/{realm}/groups/{group-id}/role-mappings/clients/{client-id}/composite` | Get effective client-level role mappings This recurses any composite roles |
| GET | `/admin/realms/{realm}/organizations/{org-id}/groups/{group-id}/role-mappings/clients/{client-id}` | Get client-level role mappings for the user or group, and the app |
| POST | `/admin/realms/{realm}/organizations/{org-id}/groups/{group-id}/role-mappings/clients/{client-id}` | Add client-level roles to the user or group role mapping |
| DELETE | `/admin/realms/{realm}/organizations/{org-id}/groups/{group-id}/role-mappings/clients/{client-id}` | Delete client-level roles from user or group role mapping |
| GET | `/admin/realms/{realm}/organizations/{org-id}/groups/{group-id}/role-mappings/clients/{client-id}/available` | Get available client-level roles that can be mapped to the user or group |
| GET | `/admin/realms/{realm}/organizations/{org-id}/groups/{group-id}/role-mappings/clients/{client-id}/composite` | Get effective client-level role mappings This recurses any composite roles |
| GET | `/admin/realms/{realm}/users/{user-id}/role-mappings/clients/{client-id}` | Get client-level role mappings for the user or group, and the app |
| POST | `/admin/realms/{realm}/users/{user-id}/role-mappings/clients/{client-id}` | Add client-level roles to the user or group role mapping |
| DELETE | `/admin/realms/{realm}/users/{user-id}/role-mappings/clients/{client-id}` | Delete client-level roles from user or group role mapping |
| GET | `/admin/realms/{realm}/users/{user-id}/role-mappings/clients/{client-id}/available` | Get available client-level roles that can be mapped to the user or group |
| GET | `/admin/realms/{realm}/users/{user-id}/role-mappings/clients/{client-id}/composite` | Get effective client-level role mappings This recurses any composite roles |

## Machine-readable artifacts (1)

- **OpenAPI** — https://artifacts.apis.io/keycloak/openapi/keycloak-client-role-mappings-api-openapi.yml

## Other Keycloak APIs (12)

- [Keycloak Clients API](https://apis.io/apis/keycloak/keycloak-clients-api/)
- [Keycloak Groups API](https://apis.io/apis/keycloak/keycloak-groups-api/)
- [Keycloak Identity Providers API](https://apis.io/apis/keycloak/keycloak-identity-providers-api/)
- [Keycloak Realms API](https://apis.io/apis/keycloak/keycloak-realms-api/)
- [Keycloak Roles API](https://apis.io/apis/keycloak/keycloak-roles-api/)
- [Keycloak Users API](https://apis.io/apis/keycloak/keycloak-users-api/)
- [Keycloak Admin API](https://apis.io/apis/keycloak/keycloak-admin-api/)
- [Keycloak Attack Detection API](https://apis.io/apis/keycloak/keycloak-attack-detection-api/)
- [Keycloak Authentication Management API](https://apis.io/apis/keycloak/keycloak-authentication-management-api/)
- [Keycloak Client Attribute Certificate API](https://apis.io/apis/keycloak/keycloak-client-attribute-certificate-api/)
- [Keycloak Client Initial Access API](https://apis.io/apis/keycloak/keycloak-client-initial-access-api/)
- [Keycloak Client Registration Policy API](https://apis.io/apis/keycloak/keycloak-client-registration-policy-api/)

## Tags

Client Role Mappings

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/keycloak/keycloak-client-role-mappings-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/keycloak/.