# Empty "permissions" claim in M2M token **URL:** \ **Category:** Integration Help\ **Tags:** api, permissions, machine-to-machine, auth0, support\ **Created:** [May 30, 2023, 1:21pm UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112 "2023-05-30T13:21:59Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![kvirk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kvirk/32/39890_2.png) [@kvirk](https://community.auth0.com/u/kvirk)\ **Post date:** [May 30, 2023, 1:21pm UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112/1 "2023-05-30T13:21:59Z")
Hi, I have created an API and added scopes/permissions to it and allowed a machine-to-machine app to access it with all the permissions enabled. When I am trying to fetch the `access_token` via postman, the token I receive contains an empty `permissions` claim. Both M2M and the API application is setup with all the required permissions. Why does it return a token with an empty permissions list? ---
**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\ **Post date:** [May 30, 2023, 8:10pm UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112/3 "2023-05-30T20:10:08Z")
Hi @kvirk, Thanks for reaching out to the Auth0 Community! If you’re looking to include the “permissions” claim in your access token, there’s a specific API setting ([Auth0 Dashboard \> Applications \> APIs \> Your API](https://manage.auth0.com/#/apis)) you will need to enable. Specifically, it is the **Add Permission in the Access Token** toggle. First, please refer to the screenshot below that shows the toggle you need to enable: ![image](https://global.discourse-cdn.com/auth0/original/3X/1/d/1de24b91a0a652482630e01954b75e889718f327.png) Once this feature has been enabled, you can see the assigned permissions when decoding the access token. Please let me know if you have any additional questions. Thanks, Rueben ---
**Author:** ![kvirk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kvirk/32/39890_2.png) [@kvirk](https://community.auth0.com/u/kvirk)\ **Post date:** [May 31, 2023, 10:29am UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112/4 "2023-05-31T10:29:57Z")
Hi, That’s where it gets confusing. The RBAC is set up exactly as per the screenshot you have shared from the very beginning. This does add permissions claim to access\_token but that is empty. Can you please help debug this? Thanks, ---
**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\ **Post date:** [May 31, 2023, 4:12pm UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112/5 "2023-05-31T16:12:08Z")
Hi @kvirk, Thank you for your response and clarification. Could you please share with me the exact code you used to make a request to get an access token via Postman and send it to me as a direct message? I would like to double-check the configuration settings of your API to deduce if it’s the origin of the issue. Thanks, Rueben ---
**Author:** ![kvirk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kvirk/32/39890_2.png) [@kvirk](https://community.auth0.com/u/kvirk)\ **Post date:** [June 1, 2023, 6:19pm UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112/6 "2023-06-01T18:19:26Z")
Hi Rueben, I have shared the details with you via DM, please check and help me debug this, as I don’t know if this is a bug in Auth0. Thanks, ---
**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\ **Post date:** [June 2, 2023, 5:32pm UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112/7 "2023-06-02T17:32:26Z")
Hey @kvirk, Thank you for sending me your code snippet through direct messages. I have just responded to your DM on the next steps to getting this working. Once we have reached a solution, I will follow up on this thread to share it with the rest of the Community. Thanks, Rueben ---
**Author:** ![kvirk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kvirk/32/39890_2.png) [@kvirk](https://community.auth0.com/u/kvirk)\ **Post date:** [June 9, 2023, 10:59am UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112/8 "2023-06-09T10:59:34Z")
Hi Rueben, Is it possible to debug as we want our Apps and APIs in the same tenant and can’t have a separate tenant just to create role/permission based auth? Thanks, Kunal ---
**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\ **Post date:** [June 23, 2023, 11:00am UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112/9 "2023-06-23T11:00:02Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.