# Testing API access permission scopes with curl

**URL:** <https://community.auth0.com/t/testing-api-access-permission-scopes-with-curl/90327>\
**Category:** Get Help\
**Created:** [September 9, 2022, 2:50pm UTC](https://community.auth0.com/t/testing-api-access-permission-scopes-with-curl/90327 "2022-09-09T14:50:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![graham.lock](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/graham.lock/32/33670_2.png) [@graham.lock](https://community.auth0.com/u/graham.lock)\
**Post date:** [September 9, 2022, 2:50pm UTC](https://community.auth0.com/t/testing-api-access-permission-scopes-with-curl/90327/1 "2022-09-09T14:50:56Z")

</div>

Hi,

We’re complete newbies to auth0.

We’ve worked through the sample from [Securing ASP.NET Minimal Web APIs with Auth0](https://auth0.com/blog/securing-aspnet-minimal-webapis-with-auth0/) but we can only get it to work when testing with curl if we use .RequireAuthorization() instead of .RequireAuthorization(“todo:read-write”)

Is there a way to test with curl using the read-write scope?

We may be missing something obvious!

---

<div class="post-metadata">

**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\
**Post date:** [September 12, 2022, 6:25pm UTC](https://community.auth0.com/t/testing-api-access-permission-scopes-with-curl/90327/3 "2022-09-12T18:25:56Z")

</div>

Hi @graham.lock,

Welcome to the Auth0 Community!

I understand that you have encountered issues trying to get an Access Token for your Web API.

> [@graham.lock](#):
>
> Is there a way to test with curl using the read-write scope?

In this situation, have you confirmed that your **TODO API** has the ‘todo:read-write’ Permissions assigned to it?

And could you please confirm if you have also switched on the _Enable RBAC_ and the _Add Permissions in the Access Token_ toggle buttons on your API settings?

Once you have confirmed these settings, you can copy and use the cURL request found on your [Auth0 Dashboard \> Applications \> APIs \> YOUR\_API \> Test tab](https://manage.auth0.com/#/apis) to request an Access Token against this API.

I hope this helps!

Please reach out if you have any further questions.

Thank you.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [December 21, 2022, 6:11pm UTC](https://community.auth0.com/t/testing-api-access-permission-scopes-with-curl/90327/4 "2022-12-21T18:11:07Z")

</div>