Do you normally chose one or the other when implementing access control, or do Scopes and RBAC serve different purpose that you can use them at the same time? Again this is with respect to the API/resources when checking what the user can do. I can see that you can use scopes (ex. read-only) to put …

Hello @jquerijero , Welcome back to the Auth0 community! What @Fario_Consulting explained above is right. Adding permissions to the Access Token is a good approach that doesn’t bring security issues. Additional to the link shared above i suggest taking a look at the following resources regarding s…

Scopes VS RBAC with respect to Access Control

Get Help

system Closed October 18, 2024, 6:35pm 6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Scopes vs API permissions Get Help security-question-concern , security-compliance	2	2072	April 6, 2023
Trouble understanding scopes vs permissions Get Help api , scopes , access-token , api-authorization , scope	7	9350	January 4, 2021
Permissions, Privileges, and Scopes Blog Discussions confused-developer	12	2971	February 25, 2025
Scopes vs Permissions confusion Get Help	10	16234	December 8, 2020
Difference between scopes and permissions in access token Get Help scopes , permissions	5	10519	August 31, 2019

Scopes VS RBAC with respect to Access Control

Related topics