# Permissions naming convention

**URL:** <https://community.auth0.com/t/permissions-naming-convention/59944>\
**Category:** Get Help\
**Tags:** permissions, auth0\
**Created:** [March 23, 2021, 5:03pm UTC](https://community.auth0.com/t/permissions-naming-convention/59944 "2021-03-23T17:03:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![miguelcabgil](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/miguelcabgil/32/28333_2.png) [@miguelcabgil](https://community.auth0.com/u/miguelcabgil)\
**Post date:** [March 23, 2021, 5:03pm UTC](https://community.auth0.com/t/permissions-naming-convention/59944/1 "2021-03-23T17:03:57Z")

</div>

Hi everyone. I’m new to this community and i would like to know if there’s a naming convention or a pattern for auth0 permissions. I know the main convention is, e.g:  
create:user, read:user, etc…  
What about create:computerScientist, or create:computer\_scientist\_dev? This is only an example, but is this correct?  
Thank you all in advance.

---

<div class="post-metadata">

**Author:** ![stephanie.chamblee](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/stephanie.chamblee/32/26087_2.png) [@stephanie.chamblee](https://community.auth0.com/u/stephanie.chamblee)\
**Post date:** [March 24, 2021, 3:32pm UTC](https://community.auth0.com/t/permissions-naming-convention/59944/3 "2021-03-24T15:32:15Z")

</div>

Hi @miguelcabgil,

Welcome to the Community!

Permissions will often follow the pattern of `<verb>:<resource>`, however, you do not have to follow this convention. As long as you do not use the [reserved names](https://auth0.com/docs/get-started/dashboard/add-api-permissions#reserved-names), you can name your API’s permissions as you like.

Common verbs to use are:

- `view`
- `create`
- `update`
- `delete`

As far as the casing of the resource (`computerScientist` vs. `computer_scientist_dev`), I believe I’ve seen this done using snake case most commonly (e.g. `create:computer_scientist_dev`), but I don’t know of an official best practice.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 8, 2021, 3:32pm UTC](https://community.auth0.com/t/permissions-naming-convention/59944/4 "2021-04-08T15:32:29Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.