Hi @david.clare,
Welcome to the Auth0 Community!
I understand you have questions about using the Management API to add and remove permissions.
This is only true if you have configured a script to append these permissions programmatically to users (e.x Post Login Action script). For this scenario, I recommend reading our How do I assign Permissions to users? FAQ for more information.
You will need to call the Management API’s Assign Permissions to a User and Remove Permissions from a User endpoints to add and remove permissions accordingly.
I hope this helps!
Please reach out if you have any additional questions.
Thanks,
Rueben