I'm using keycloak with spring security as resource server with OAuth2, i created a user in this realm, and when this user tries to query the other users I get this : 403 Forbidden on GET request for "http://localhost:8282/admin/realms/master/users"
From what I found on the internet, there's a suggestion to either get the admin token but I'm not sure about the secure part ... or assign for each user the role to query users but this would be rather annoying to do for each user ... any idea what would be the best and secure way to this ?
Other than query the other users, the user can change some of his information and that's all