# Scoped / Multi-Level RBAC Roles

**URL:** <https://community.auth0.com/t/scoped-multi-level-rbac-roles/102027>\
**Category:** Get Help\
**Tags:** user-profile, user-management\
**Created:** [March 7, 2023, 10:22pm UTC](https://community.auth0.com/t/scoped-multi-level-rbac-roles/102027 "2023-03-07T22:22:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![duncan.bain](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@duncan.bain](https://community.auth0.com/u/duncan.bain)\
**Post date:** [March 7, 2023, 10:22pm UTC](https://community.auth0.com/t/scoped-multi-level-rbac-roles/102027/1 "2023-03-07T22:22:29Z")

</div>

Hello,

We’re currently investigating using Auth0 for authentication and authorization within our B2B SAAS.

Our current sticking point is trying to figure out how implement the following type of RBAC within Auth0:

- Roles and permissions at an organisational level, i.e super admin with full access rights, a role in which you can create a project
- Roles within a specific project, distinct to organisational level roles, i.e a role where someone can add tasks to a specific project and and not all projects.

Any ideas how something like this can be implemented with Auth0?

---

<div class="post-metadata">

**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\
**Post date:** [March 8, 2023, 7:35pm UTC](https://community.auth0.com/t/scoped-multi-level-rbac-roles/102027/3 "2023-03-08T19:35:31Z")

</div>

Hi @duncan.bain,

Welcome to the Auth0 Community!

I understand that you would like to implement RBAC in the context of an Organization.

Yes, this is possible! I have outlined a couple of steps to follow to configure RBAC in the context of an Organization:

1. First, you will need to configure RBAC: [Configure Core Authorization Features for Role-Based Access Control](https://auth0.com/docs/manage-users/access-control/configure-core-rbac)
2. On step 4, you will need to assign users to Roles in the context of an Organization: [Add Roles to Organization Members](https://auth0.com/docs/manage-users/organizations/configure-organizations/add-member-roles)

Take note that there is a difference between assigning roles to users globally versus in the context of an Organization. I recommend reading [this FAQ](https://community.auth0.com/t/organization-permissions-claim-empty/99135) for more information.

Please let me know if you have any further questions or need clarification on the implementation.

Thanks,  
Rueben

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 22, 2023, 7:35pm UTC](https://community.auth0.com/t/scoped-multi-level-rbac-roles/102027/4 "2023-03-22T19:35:45Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.