Roles across multiple applications

Thanks. Our use case is specifically to service external clients rather than internal employees so we were thinking of mapping auth0 roles to application roles. The applications themselves currently have the ability to create custom roles so I think this would get tricky moving forward. Would it be better to use auth0 for authentication and then leave the RBAC to the applications?