# Incorrect scopes in JWT using Authorization Extension

**URL:** <https://community.auth0.com/t/incorrect-scopes-in-jwt-using-authorization-extension/9913>\
**Category:** JWT.io\
**Created:** [March 9, 2018, 8:33am UTC](https://community.auth0.com/t/incorrect-scopes-in-jwt-using-authorization-extension/9913 "2018-03-09T08:33:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dave.ashman1](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@dave.ashman1](https://community.auth0.com/u/dave.ashman1)\
**Post date:** [March 9, 2018, 8:33am UTC](https://community.auth0.com/t/incorrect-scopes-in-jwt-using-authorization-extension/9913/1 "2018-03-09T08:33:32Z")

</div>

Hi there,

We currently have a few clients in a tenant, and have up until now been using CLIENT X. We have set up roles via the Authorization Extension and all of the correct scopes for a user get returned when the user logs in, eg: **openid profile read:dashboard read:login**

However, we are now needing to change the client we are using to CLIENT Y. We have setup everything for this client EXACTLY the same as the first and created an identical role, but for this client, and assigned it to the same user, using the same Audience.  
The problem is, we now get all of the scopes assigned to THE API, not scopes specific to this role eg: **openid profile read:login read:myaccount read:dashboard**. So this includes **read:myaccount** , which it should not.

Many thanks,  
Dave

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [December 18, 2018, 2:42pm UTC](https://community.auth0.com/t/incorrect-scopes-in-jwt-using-authorization-extension/9913/2 "2018-12-18T14:42:12Z")

</div>

Hey @dave.ashman1

As it has been more than a few months since this topic was opened and there has been no reply or further information provided from the community as to the existence of the issue we would like to check if you are still facing the described challenge?

We are more than happy to assist in any way! If the issue is still out there please let us know so we can create a new thread for better visibility, otherwise we’ll close this one in week’s time.

Thank you!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [December 24, 2018, 5:14pm UTC](https://community.auth0.com/t/incorrect-scopes-in-jwt-using-authorization-extension/9913/3 "2018-12-24T17:14:25Z")

</div>

This topic was automatically closed after 6 days. New replies are no longer allowed.