Hi,
When using the Auth0 Deploy CLI which interacts with the default Management API, we’re trying to reduce the number of permissions it has.
It seems like update:clients is required for the login page. ie in tenant.yml
pages:
- name: login
enabled: false
html: ./pages/login.html
Looking through the source code, the src/tools/auth0/handlers/pages.ts from auth0-deploy-cli has this which I believe is the culprit.
await this.client.clients.update(globalClient[0].client_id, {
custom_login_page: page.html,
custom_login_page_on: page.enabled,
});
Could this potentially be decoupled from the update:clients permission?