Fine-Grained User Provisioning and Management

[stephanie.chamblee]

Hi @brady,

@brady

I checked out the pre-registration hook, but my understanding is that the creating-user’s information (role, app_metadata) is not included in the request context. Additionally, it seems that hook is more for when a user is registering themselves, and not necessarily when the user is being created in the database by a different user (via the management api).

That is correct that the pre-registration hook will not cover all sign up scenarios such as using social connections, etc. However, you may want to use a rule for this as described here: How do I add a default role to a new user on first login?

The role will be assigned the first time the user authenticates no matter how the user is created.

However, since you do have so many different types of roles, managing users through the Managment API could be preferable for you. You can use the /api/v2/roles/{id}/users endpoint to assign roles, or you can use the ManagementClient Management API SDK’s assignRolestoUser method.

You can register your custom API and assign it appropriate user management scopes by creating a Machine-to-Machine application.