# Add roles and permissions to user

**URL:** <https://community.auth0.com/t/add-roles-and-permissions-to-user/21007>\
**Category:** Get Help\
**Tags:** auth0-php, laravel, php, permissions, roles\
**Created:** [February 6, 2019, 11:59am UTC](https://community.auth0.com/t/add-roles-and-permissions-to-user/21007 "2019-02-06T11:59:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![didi](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/didi/32/10752_2.png) [@didi](https://community.auth0.com/u/didi)\
**Post date:** [February 6, 2019, 11:59am UTC](https://community.auth0.com/t/add-roles-and-permissions-to-user/21007/1 "2019-02-06T11:59:33Z")

</div>

I am using Laravel with the [Auth0 PHP SDK](https://github.com/auth0/auth0-PHP) and the [Laravel plugin](https://github.com/auth0/laravel-auth0). With below rule to attach roles, permissions and groups to users:

```
function (user, context, callback) {
  context.idToken['https://NAME.auth0.com/claims/authorization/roles'] = user.roles;
  context.idToken['https://NAME.auth0.com/claims/authorization/permissions'] = user.permissions;
  context.idToken['https://NAME.auth0.com/claims/authorization/groups'] = user.groups;
  callback(null, user, context);
}

```

When reading the value of the idToken to get a users permissions in Laravel like so:

```
$permissions = \App::make('auth0')
    ->getUser()['profile']['https://NAME:auth0:com/claims/authorization/permissions'];

```

the index in the array `'https://NAME:auth0:com/claims/authorization/permissions'` does not have dots (.) anymore but they are replaced by colons (:). Any idea what is going on here?

---

<div class="post-metadata">

**Author:** ![josh.cunningham](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/josh.cunningham/32/16289_2.png) [@josh.cunningham](https://community.auth0.com/u/josh.cunningham)\
**Post date:** [February 18, 2019, 9:07pm UTC](https://community.auth0.com/t/add-roles-and-permissions-to-user/21007/2 "2019-02-18T21:07:24Z")

</div>

@didi - Apologies for the delay here. I’m not sure what’s going on with this, unfortunately. Can you test that Rule out in a different application to see if it’s just in Laravel or somewhere else?

One thing I should note … the namespacing for ID token claims does conform to specific standards, including not using `auth0.com` in there. When I try that exact claim in Rules, it does not appear in my ID token. You might want to try using something more specific to your application/brand.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [August 29, 2019, 11:18am UTC](https://community.auth0.com/t/add-roles-and-permissions-to-user/21007/3 "2019-08-29T11:18:48Z")

</div>