# In action post-login event authorization roles is empty

**URL:** <https://community.auth0.com/t/in-action-post-login-event-authorization-roles-is-empty/71227>\
**Category:** Get Help\
**Tags:** actions, roles\
**Created:** [October 13, 2021, 8:08am UTC](https://community.auth0.com/t/in-action-post-login-event-authorization-roles-is-empty/71227 "2021-10-13T08:08:29Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![turbo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/turbo/32/30245_2.png) [@turbo](https://community.auth0.com/u/turbo)\
**Post date:** [October 13, 2021, 8:08am UTC](https://community.auth0.com/t/in-action-post-login-event-authorization-roles-is-empty/71227/1 "2021-10-13T08:08:29Z")

</div>

I created a post-login action to attach roles on the idToken but the event auth roles come empty.

```auto
event.authorization.roles

```

My app is using the Google Workspace authentication.

This is the code of my action

 ![image](https://global.discourse-cdn.com/auth0/original/3X/b/b/bb4e209a1c4665228214b2982fbfb3d9485f7e24.png)

As a workaround I am fetching from the user app\_metadata but that isn’t ideal because I have to manually update the app\_metadata for each user so it matches the real Auth0 roles.

Any idea what am I missing? I wonder if I need to enable an extra permission to the web application.

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [October 13, 2021, 5:04pm UTC](https://community.auth0.com/t/in-action-post-login-event-authorization-roles-is-empty/71227/3 "2021-10-13T17:04:24Z")

</div>

Hi @turbo,

Can you please DM me the name of the tenant and an example user who has roles assigned. I’d like to take a look at the configuration. Thanks!

---

<div class="post-metadata">

**Author:** ![asciibn](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/asciibn/32/33208_2.png) [@asciibn](https://community.auth0.com/u/asciibn)\
**Post date:** [November 25, 2021, 4:45am UTC](https://community.auth0.com/t/in-action-post-login-event-authorization-roles-is-empty/71227/5 "2021-11-25T04:45:42Z")

</div>

Hi,  
Similar situation here. I think I have it right but can’t see anything in the tokens or the logs.  
I’m not sure the action is getting triggered.  
thanks.

 ![Screen Shot 2021-11-24 at 11.43.39 PM](https://global.discourse-cdn.com/auth0/original/3X/6/b/6b8667afc7d11c476b4399f1fadcfefe2bbb579f.png)

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [November 26, 2021, 4:43pm UTC](https://community.auth0.com/t/in-action-post-login-event-authorization-roles-is-empty/71227/6 "2021-11-26T16:43:43Z")

</div>

Hi @asciibn,

This has been reported to the team and is in our backlog.

---

<div class="post-metadata">

**Author:** ![asciibn](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/asciibn/32/33208_2.png) [@asciibn](https://community.auth0.com/u/asciibn)\
**Post date:** [November 26, 2021, 5:36pm UTC](https://community.auth0.com/t/in-action-post-login-event-authorization-roles-is-empty/71227/7 "2021-11-26T17:36:29Z")

</div>

Thanks. If it helps my account is through Heroku.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [January 20, 2022, 11:05pm UTC](https://community.auth0.com/t/in-action-post-login-event-authorization-roles-is-empty/71227/8 "2022-01-20T23:05:20Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.