# How to give roles and permissions to users in a Python WebApp **URL:** \ **Category:** Get Help\ **Tags:** python, security, jwt, roles\ **Created:** [June 22, 2021, 1:28pm UTC](https://community.auth0.com/t/how-to-give-roles-and-permissions-to-users-in-a-python-webapp/64848 "2021-06-22T13:28:22Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![xmjoodi](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/xmjoodi/32/30144_2.png) [@xmjoodi](https://community.auth0.com/u/xmjoodi)\ **Post date:** [June 22, 2021, 1:28pm UTC](https://community.auth0.com/t/how-to-give-roles-and-permissions-to-users-in-a-python-webapp/64848/1 "2021-06-22T13:28:22Z")
I’m developing a simple python web app that has two roles. Let’s call them Role (A,B). A permissions: [1,2,3] B permissions: [4,5,6] 1. I want to be able to assign users a default role (A). 2. I want to be able to differentiate between the users that have signed. In order to solve problem one, I assumed that any user that have signed into my web app by default is given a a default Role (A) by hitting the API management (expensive). In order to be of role B, you need to send a ticket for being of Role B (which is not what I really intend). In order to solve problem two, I just use JWT to check permission. If permission (1) is there in JWT then I know user is of role (A) else user is of role (B). However, in order to obtain JWT I ended up saving the “access token” in the session, which is terrible. I wonder if there’s a way to give default roles to users and be able to differentiate between them that’s easy and secure. Thanks in advance. ---
**Author:** ![stephanie.chamblee](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/stephanie.chamblee/32/26087_2.png) [@stephanie.chamblee](https://community.auth0.com/u/stephanie.chamblee)\ **Post date:** [June 22, 2021, 3:25pm UTC](https://community.auth0.com/t/how-to-give-roles-and-permissions-to-users-in-a-python-webapp/64848/3 "2021-06-22T15:25:55Z")
Hi @xmjoodi, > [@xmjoodi](#): > > I want to be able to assign users a default role (A). Here is an FAQ for adding a default role to the user: > [@How do I add a default role to a new user on first login?](https://community.auth0.com/t/how-do-i-add-a-default-role-to-a-new-user-on-first-login/25857): > > Question: How do I assign a default role to a new user on first login? Answer: If you are using the Authorization Core, you can leverage the Management API in a rule to assign a role based on login count. Example Rule: function (user, context, callback) { const count = context.stats && context.stats.loginsCount ? context.stats.loginsCount : 0; if (count \> 1) { return callback(null, user, context); } const ManagementClient = require('auth0@2.27.0').ManagementClient; … Please let me know if you have additional questions about this. > [@xmjoodi](#): > > I want to be able to differentiate between the users that have signed. You can store the roles in a custom claim: [https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token](https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token) You’d then access the custom claim in the /userinfo request as described in the quickstart: [https://auth0.com/docs/quickstart/webapp/python/01-login#add-the-callback-handler](https://auth0.com/docs/quickstart/webapp/python/01-login#add-the-callback-handler) ---
**Author:** ![xmjoodi](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/xmjoodi/32/30144_2.png) [@xmjoodi](https://community.auth0.com/u/xmjoodi)\ **Post date:** [June 23, 2021, 11:45pm UTC](https://community.auth0.com/t/how-to-give-roles-and-permissions-to-users-in-a-python-webapp/64848/4 "2021-06-23T23:45:17Z")
Thank you @stephanie.chamblee that was really helpful. Have a lovely day Keep Authing 😆 0️⃣ ---
**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\ **Post date:** [July 8, 2021, 11:45pm UTC](https://community.auth0.com/t/how-to-give-roles-and-permissions-to-users-in-a-python-webapp/64848/5 "2021-07-08T23:45:32Z")
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.