Hi, with those settings enabled for an API: [Screenshot from 2023-04-01 09-56-43] In the backend, I get all the user’s permissions in the access token (permissions claim), is there any security issues with this approach? I understand that with he recommended way, i.e. adding the scopes on the cli…

Hi there @jflebeau ! Put simply, permissions (privileges when assigned to a user) relate to the actions a user can take for a given resource whereas scopes, generally speaking, are requested by the client (app) to act on behalf of the user. Adding permissions to the access token via RBAC is an accep…

Scopes vs API permissions

Get Help

system Closed April 25, 2023, 10:45pm 4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Scopes VS RBAC with respect to Access Control Get Help consent , application	4	573	October 18, 2024
Scopes vs Permissions confusion Get Help	10	16235	December 8, 2020
Permissions: claim or scopes Get Help scopes , claims , permissions	11	18171	December 8, 2020
Scopes and permissions with RBAC for Machine-to-machine authentication Get Help auth0 , api , scopes , client-credentials-g	2	7348	June 11, 2020
Trouble understanding scopes vs permissions Get Help api , scopes , access-token , api-authorization , scope	7	9351	January 4, 2021

Scopes vs API permissions

Related topics