Skip to main content
Creating an app-to-role mapping means associating an app to a role. The role name you create in the App Manager and associate to an app is just a string stored next to the app. NexusOne matches the created role to any user whose token already carries that role name. So, ensure you have previously created a role with that name using the Govern feature.
NexusOne doesn’t check if an app role exists in Keycloak. If you misspell an app-role name, then no user gets access through the app-to-role mapping.

​
Prerequisite

Before starting this task, ensure you have the following:
  • nx1_app_manager role.
  • A previously created role having the same name as the role you want to associate to an app.

​
Create an app-to-role mapping

Perform these steps to create an app-to-role mapping:
  1. Log in to NexusOne.
  2. On the top navigation bar, hover your mouse over Platform, and then select App Manager.
  3. Select Mine if you want to create a mapping for your own app, or Everyone if you want to create a mapping for someone else’s app.
  4. In the table, scroll down, and then select an app you want to create a mapping for.
  5. Click the Access tab.
  6. In the Who can use it section, click Add role.
  7. In the Role Name field, enter a role name you previously created using Keycloak.
  8. Click Add Role.

​
Additional resources

For an overview of the app manager feature, refer to App manager overview.