# NestJS + Graphql + Authorization RBAC: How can I manage roles, groups and permissions(create/read/etc) in backend?

**URL:** <https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550>\
**Category:** Get Help\
**Tags:** graphql, authorization, rbac, nestjs, auth0\
**Created:** [April 11, 2022, 2:43pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550 "2022-04-11T14:43:12Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![ValchanOficial](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/valchanoficial/32/36515_2.png) [@ValchanOficial](https://community.auth0.com/u/ValchanOficial)\
**Post date:** [April 11, 2022, 2:43pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/1 "2022-04-11T14:43:12Z")

</div>

How can I manage roles, groups and permissions(create/read/etc) in backend? without needed to access in website.

Thank you.

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [April 12, 2022, 10:14pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/4 "2022-04-12T22:14:24Z")

</div>

Hi @ValchanOficial,

Welcome to the Auth0 Community!

If you are using the authorization extension, you can read/update/delete with the [Authorization Extension API](https://auth0.com/docs/api/authorization-extension).

Hope that helps!

---

<div class="post-metadata">

**Author:** ![ValchanOficial](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/valchanoficial/32/36515_2.png) [@ValchanOficial](https://community.auth0.com/u/ValchanOficial)\
**Post date:** [April 12, 2022, 10:27pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/5 "2022-04-12T22:27:01Z")

</div>

Thank you, I will check here how to do this, cause I’m getting this error: " Error: SSL connect error"

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [April 12, 2022, 10:28pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/6 "2022-04-12T22:28:25Z")

</div>

It sounds like you may have something misconfigured. Can you please share an example of the request you are making that throws this error?

---

<div class="post-metadata">

**Author:** ![ValchanOficial](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/valchanoficial/32/36515_2.png) [@ValchanOficial](https://community.auth0.com/u/ValchanOficial)\
**Post date:** [April 12, 2022, 10:42pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/7 "2022-04-12T22:42:45Z")

</div>

I tried to call this url in [Insomnia](https://insomnia.rest/) to get all permissions, using my information and access\_token

`https://<name>.<region>.webtask.run/<id>/api/permissions`

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [April 12, 2022, 10:49pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/8 "2022-04-12T22:49:11Z")

</div>

If you log in to the doc that I linked you should get your exact URL. Can you make sure everything is set correctly?

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [April 12, 2022, 10:50pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/9 "2022-04-12T22:50:36Z")

</div>

Also, did you [Enable API Access to Authorization Extension](https://auth0.com/docs/customize/extensions/authorization-extension/enable-api-access-to-authorization-extension)?

---

<div class="post-metadata">

**Author:** ![ValchanOficial](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/valchanoficial/32/36515_2.png) [@ValchanOficial](https://community.auth0.com/u/ValchanOficial)\
**Post date:** [April 12, 2022, 10:57pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/10 "2022-04-12T22:57:34Z")

</div>

Yes, it’s enabled

 ![image](https://global.discourse-cdn.com/auth0/original/3X/2/c/2cbeeaf42a2143961ce9833c181abddf44313385.png)

 ![image](https://global.discourse-cdn.com/auth0/original/3X/d/0/d01c8e1be6c241b46466caeeb3b689f1f4565be4.png)

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [April 12, 2022, 11:06pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/11 "2022-04-12T23:06:36Z")

</div>

I’m not familiar with insomnia…is this call coming from your local machine? Are you able to test the connection via postman or curl?

---

<div class="post-metadata">

**Author:** ![ValchanOficial](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/valchanoficial/32/36515_2.png) [@ValchanOficial](https://community.auth0.com/u/ValchanOficial)\
**Post date:** [April 12, 2022, 11:15pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/12 "2022-04-12T23:15:01Z")

</div>

Yes, it is from my local machine.  
Oh… in postman I got a different error

![image](https://global.discourse-cdn.com/auth0/original/3X/1/c/1c6c84bda3f119ee1526ceb0348b28a2da2190cf.png)

---

<div class="post-metadata">

**Author:** ![ValchanOficial](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/valchanoficial/32/36515_2.png) [@ValchanOficial](https://community.auth0.com/u/ValchanOficial)\
**Post date:** [April 12, 2022, 11:25pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/13 "2022-04-12T23:25:40Z")

</div>

Into platform when I open my API then I click on ‘Test’ tab it shows the same message

![image](https://global.discourse-cdn.com/auth0/original/3X/4/2/42e55230842d7ab2d6cb9c67176c2e513ca66ba5.png)

---

<div class="post-metadata">

**Author:** ![ValchanOficial](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/valchanoficial/32/36515_2.png) [@ValchanOficial](https://community.auth0.com/u/ValchanOficial)\
**Post date:** [April 12, 2022, 11:29pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/14 "2022-04-12T23:29:09Z")

</div>

I found the reason…

Client Credentials was unchecked 🤦‍♀️

 ![image](https://global.discourse-cdn.com/auth0/original/3X/1/c/1cd299a402f51609d0244c480d38933d2ab46a56.png)

Edit: And It doesn’t work in insomnia, I will keep using postman

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [April 13, 2022, 6:19pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/15 "2022-04-13T18:19:25Z")

</div>

Thanks for posting that! Glad you found a solution 😄.

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [May 25, 2022, 9:29pm UTC](https://community.auth0.com/t/nestjs-graphql-authorization-rbac-how-can-i-manage-roles-groups-and-permissions-create-read-etc-in-backend/81550/16 "2022-05-25T21:29:58Z")

</div>


