Thank you for the answer! Having ever user login to call Management API will not be ideal, specially now Auth0 applies pretty strict rate limit on it.
Also I found out that Auth0 Rules is able to use user.groups, the template Active Directory group membership Rules demonstrates that. It sounds weird to me that Auth0 Actions can’t, while we are encouraged to migrate to Actions.
Yes, I understand that you may hit Rate Limits when using the Management API in an Action.
I am glad you could workaround this issue using an Auth0 Rule.
Yes, I completely understand. At the time of writing this response, there is still a feature gap between Auth0 Actions and Rules. Therefore, we still encourage you to migrate to Actions where possible and to continue using Rules until there is feature parity between them.
We apologize for any inconvenience that this may have caused you.
Please reach out if there’ anything else I can do to help.