# Assigning Default permissions to user on login with Auth0 Actions

**URL:** <https://community.auth0.com/t/assigning-default-permissions-to-user-on-login-with-auth0-actions/197831>\
**Category:** Get Help\
**Tags:** users, management-api\
**Created:** [March 3, 2026, 5:26pm UTC](https://community.auth0.com/t/assigning-default-permissions-to-user-on-login-with-auth0-actions/197831 "2026-03-03T17:26:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![dmiller](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dmiller/32/70911_2.png) [@dmiller](https://community.auth0.com/u/dmiller)\
**Post date:** [March 3, 2026, 5:26pm UTC](https://community.auth0.com/t/assigning-default-permissions-to-user-on-login-with-auth0-actions/197831/1 "2026-03-03T17:26:05Z")

</div>

Hi,

Assuming there is no other way of assigning permissions to a user on login and/or creation apart from using an action, what action code would be needed to do similar as per roles: [Assigning a Default Role to Users on Sign-Up with Auth0 Actions](https://auth0.com/blog/assign-default-role-on-sign-up-with-actions/)

Thanks

---

<div class="post-metadata">

**Author:** ![gerald.czifra](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/gerald.czifra/32/75301_2.png) [@gerald.czifra](https://community.auth0.com/u/gerald.czifra)\
**Post date:** [March 4, 2026, 12:59am UTC](https://community.auth0.com/t/assigning-default-permissions-to-user-on-login-with-auth0-actions/197831/3 "2026-03-04T00:59:22Z")

</div>

Hi @dmiller

Thank you for reaching out to us!

In essence, a role is a set/collection of permissions that you assign to your users and our [RBAC feature](https://auth0.com/docs/manage-users/access-control/rbac) is designed to handle the management of user permissions as roles. Once RBAC is enabled for your API, it is possible to [assign users specific permissions](https://auth0.com/docs/manage-users/access-control/configure-core-rbac/rbac-users/assign-permissions-to-users) via the Management API or the Auth0 Dashboard, although adding permissions directly to a user circumvents the benefits of role-based access control (RBAC) and is not typically recommended.

I was able to find these additional resources that outline this use-case and also how to add permissions to the Access/ID Tokens:

- [Assign permissions using Actions Post User Registration flow](https://community.auth0.com/t/assign-permissions-using-actions-post-user-registration-flow/88455);
- [Add Roles and Permissions to the ID Token Using Actions](https://support.auth0.com/center/s/article/add-roles-and-permissions-to-the-id-token-using-actions).

Hope this helped!  
Gerald

---

<div class="post-metadata">

**Author:** ![dmiller](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dmiller/32/70911_2.png) [@dmiller](https://community.auth0.com/u/dmiller)\
**Post date:** [March 4, 2026, 3:27pm UTC](https://community.auth0.com/t/assigning-default-permissions-to-user-on-login-with-auth0-actions/197831/4 "2026-03-04T15:27:37Z")

</div>

Thanks @gerald.czifra ,

That certainly pointed me in the right direction.

One thing to note, the ManagementClient API has been updated since those posts, so the actual creation of permissions is now more akin to:

`management.users.permissions.create(userId, data);`

Thanks 🙂

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 18, 2026, 3:27pm UTC](https://community.auth0.com/t/assigning-default-permissions-to-user-on-login-with-auth0-actions/197831/5 "2026-03-18T15:27:50Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.