Reading roles inside a rule

[ryantomaselli]

Hey guys;

My goal is to assign an initial role to a user on first login. I want to find the appropriate role’s id so I want to fetch the list of all roles and then get the id of the target role for assignment to the user.

I’m getting the following error when I try to call getRoles:
Unhandled rejection APIError: {"statusCode":403,"error":"Forbidden","message":"Insufficient scope, expected any of: read:roles","errorCode":"insufficient_scope"}

  var ManagementClient = require('auth0@2.17.0').ManagementClient;
  var management = new ManagementClient({
    token: auth0.accessToken,
    domain: auth0.domain
  });

      management.getRoles().then(function (roles) {
        console.log('roles', roles);
      });

Any pointers appreciated

[dan.woda]

Hi @ryantomaselli,

You will need to get an access token using a client credentials grant if you want to access any scopes other than read:users or update:users.

As mentioned at the bottom of this doc.

Let me know if you need more help with this.

Thanks,
Dan

[mathiasconradt]

@ryantomaselli

My goal is to assign an initial role to a user on first login.

Regarding this part of the question, and in addition to Dan’s reply, there was a similar post just last week:

Assign Roles to users using Rules

The linked thread shows a proper way to assign a role using the request package. Just wanted to point out that in Rules there is also the Node-SDK and thus ManagementClient object available (though requires to use the higher version than the default) which already has a wrapper method for assigning roles, so that could be used alternatively: function (user, context, callback) { var count = context.stats && context.stats.loginsCount ? context.stats.loginsCount : 0; if (count > 1) { retu…

[dan.woda]

Also, this FAQ could be helpful.

How do I add a default role to a new user on first login?

Question: How do I assign a default role to a new user on first login? Answer: If you are using the Authorization Core, you can leverage the Management API in a rule to assign a role based on login count. Example Rule: function (user, context, callback) { const count = context.stats && context.stats.loginsCount ? context.stats.loginsCount : 0; if (count > 1) { return callback(null, user, context); } const ManagementClient = require('auth0@2.27.0').ManagementClient; …