In a B2B context with Auth0 RBAC for API’s you might want to limit the amount of permissions to keep the scope param in authorize request from bloating too much in user based login flows e.g. authorization code flow. [image] Enable Role-Based Access Control for APIs Learn how to enable …

Hi @mhautala Welcome back to the Auth0 community! I would recommend using coarse grained scopes whenever dealing with permissions, especially in the case of RBAC, or APIs permissions. However, using a more granular scope schema is not a bad choice if it fits better for your use case. What do you …

Design guidelines Auth0 RBAC API permissions for users and M2M clients

Get Help

system Closed April 8, 2025, 2:58pm 6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Organization-scoped permissions for M2M clients Product Feedback permissions , rbac , m2m	4	591	October 7, 2024
Login token to use APIs Get Help	2	1786	April 22, 2022
Scopes and permissions with RBAC for Machine-to-machine authentication Get Help auth0 , api , scopes , client-credentials-g	2	7338	June 11, 2020
Difference between scopes and permissions in access token Get Help scopes , permissions	5	10515	August 31, 2019
How to use M2M token scopes Get Help apis , application	5	394	August 2, 2024

Design guidelines Auth0 RBAC API permissions for users and M2M clients

Related topics