I’ve created an application in Auth0. It’s been granted the read:users permission only. I’m using the application’s client id/client secret in a client_credentials exchange to call /oauth/token to get a token (requesting scopes openid profile email) and intend on calling /api/v2/users/xxx with that …

I guess I was just doing it wrong after all. When calling /oauth/token I was including a scopes field in the request, but you can omit it in the request and it’ll just return whatever scopes are granted to the client in the JWT it returns. Much less fuss.

Minimum scopes for the Auth0 Management API

Get Help

system Closed December 23, 2021, 9:08pm 4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
How to specify scopes in an authorize call Get Help management-api , users	6	1517	May 8, 2024
Auth0 JWT doesn't have requested API Scopes Get Help jwt , scopes	10	4657	September 4, 2021
Auth0 scope not returning all requested values Get Help auth0 , api , management-api	8	3257	June 14, 2023
I can't update user email or any other information Get Help jwt , auth0 , api , management-api	2	3406	October 19, 2021
Auth0 permissions error: read:user_idp_tokens Get Help auth0	2	1815	December 22, 2022

Minimum scopes for the Auth0 Management API

Related topics