# Auth0 Authorization Extension

**URL:** <https://community.auth0.com/t/auth0-authorization-extension/112662>\
**Category:** Get Help\
**Tags:** user-authorization-rbac, directory-authorization\
**Created:** [August 2, 2023, 8:08am UTC](https://community.auth0.com/t/auth0-authorization-extension/112662 "2023-08-02T08:08:49Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![firas.fendri](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/firas.fendri/32/48549_2.png) [@firas.fendri](https://community.auth0.com/u/firas.fendri)\
**Post date:** [August 2, 2023, 8:08am UTC](https://community.auth0.com/t/auth0-authorization-extension/112662/1 "2023-08-02T08:08:49Z")

</div>

Hello,

I have a use case where I need to create Users, Roles, Permission and **Groups**.  
Especially the group part I need it to be generic so the user can create groups and nested groups dunamiclly.

I find some notes saying that the Auth0 authorization that implements the groups feature is not maintained anymore and will be deprecated.

I wanted to verify with the community, can I use it for production?

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [August 7, 2023, 3:14pm UTC](https://community.auth0.com/t/auth0-authorization-extension/112662/3 "2023-08-07T15:14:41Z")

</div>

Hi @firas.fendri,

That is correct, the Authorization Extension is in a legacy state and will eventually be deprecated. I understand that there isn’t currently a “groups” functionality in the core product, and we know this gap exists.

I wouldn’t suggest using it if you can avoid it, but yes, you can use it in production. That said, you will need to migrate when it’s replaced. 😔

---

<div class="post-metadata">

**Author:** ![firas.fendri](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/firas.fendri/32/48549_2.png) [@firas.fendri](https://community.auth0.com/u/firas.fendri)\
**Post date:** [August 14, 2023, 2:38pm UTC](https://community.auth0.com/t/auth0-authorization-extension/112662/4 "2023-08-14T14:38:50Z")

</div>

Thank you @dan.woda ,

I have a use case where i want to provide to each of my application users the full control to create users ,roles ,permission ,groups but be separate (multi-tenant) from each other.

As I verified now that I can’t user auth0 authorization extension for this also working with the organization the roles created are global and not related to the specific organization.

I thought about working with both organization and authorization extension but the docs said it’s not possible to integrate between them.

Do you have any idea how can i achieve this purpose? , i am looking to develop a fully general RBAC solution based on Auth0 something like AWS IAM, Azure AD …

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [August 14, 2023, 2:40pm UTC](https://community.auth0.com/t/auth0-authorization-extension/112662/5 "2023-08-14T14:40:16Z")

</div>

@firas.fendri,

You may be interested in [Fine Grained Authorization (FGA) at scale for developers - Auth0](https://auth0.com/fine-grained-authorization)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [August 28, 2023, 2:40pm UTC](https://community.auth0.com/t/auth0-authorization-extension/112662/6 "2023-08-28T14:40:38Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.