We need to allow a user with an elevated role to set/modify the role of other users. Currently we are storing their role in their app_metadata. How can we allow someone to modify someone else’s app_metadata from within our application? We are have an SPA with angular v1.3, lock v10, auth0js v8.

You can make use of Auth0 Management API’s Update a user endpoint to modify the user’s app_metadata from within the application. You can put role based checks to only allow user with an elevated role to set/modify the role of other users.

How to allow a user to modify another user's app_metadata?

Get Help

Topic		Replies	Views
Angular: Change app_metadata for current user or role Get Help management-api , roles	0	859	July 5, 2023
How to update user_metadata from front-end directly Get Help	2	3248	April 19, 2021
Help understanding the use of Management API Get Help	5	5861	June 25, 2019
Calling management API to update user meta data from SPA Get Help user_metadata	4	4654	June 17, 2021
What's the best practice to handle metadata? Get Help rules , spa , app_metadata , scope , user_metadata	3	5182	August 16, 2019

How to allow a user to modify another user's app_metadata?

Related topics