# \#permissions **URL:** https://community.auth0.com/tag/permissions/433.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Minimum permissions required to view SCIM logs](https://community.auth0.com/t/minimum-permissions-required-to-view-scim-logs/205006)
**Author:** [@lucho](https://community.auth0.com/u/lucho)\ **Replies:** 3\ **Last updated:** [November 6, 2026, 10:11am UTC](https://community.auth0.com/t/minimum-permissions-required-to-view-scim-logs/205006 "2026-11-06T10:11:35Z")
What are the minimum set of permissions required to view SCIM operation logs in the Auth0 dashboard? We’ve noticed that the only way for someone in our team to see SCIM operations in the logs is to be an Admin. Is that … --- ## [Inbound SCIM provisioning for Auth0 Team members, tenant access, and Dashboard roles](https://community.auth0.com/t/inbound-scim-provisioning-for-auth0-team-members-tenant-access-and-dashboard-roles/202710)
**Author:** [@hdagz](https://community.auth0.com/u/hdagz)\ **Replies:** 1\ **Last updated:** [August 31, 2026, 7:09pm UTC](https://community.auth0.com/t/inbound-scim-provisioning-for-auth0-team-members-tenant-access-and-dashboard-roles/202710 "2026-08-31T19:09:10Z")
Feature: Inbound SCIM provisioning for Auth0 Team members, tenant access, and Dashboard roles Description: Add SCIM support for provisioning and deprovisioning Auth0 Team members, including assigning access to specifi… --- ## [Access User Permissions in Post-Login Action](https://community.auth0.com/t/access-user-permissions-in-post-login-action/184531)
**Author:** [@jharris](https://community.auth0.com/u/jharris)\ **Replies:** 3\ **Last updated:** [August 21, 2026, 6:27am UTC](https://community.auth0.com/t/access-user-permissions-in-post-login-action/184531 "2026-08-21T06:27:11Z")
Feature: Make user’s permissions accessible via Post-Login Action if RBAC is enabled. Description: It would be very helpful if it were possible to access the authenticating user’s Permissions during a Post-Login Action … --- ## [Permissions from event.authorization.permissions become empty in custom JWT generated inside Post Login Action](https://community.auth0.com/t/permissions-from-event-authorization-permissions-become-empty-in-custom-jwt-generated-inside-post-login-action/200229)
**Author:** [@usha78633](https://community.auth0.com/u/usha78633)\ **Replies:** 1\ **Last updated:** [May 29, 2026, 8:42pm UTC](https://community.auth0.com/t/permissions-from-event-authorization-permissions-become-empty-in-custom-jwt-generated-inside-post-login-action/200229 "2026-05-29T20:42:24Z")
I am using a Post Login Action in Auth0 to generate a custom PAT JWT using jsonwebtoken.sign(). RBAC is enabled and “Add Permissions in Access Token” is enabled for my API. The Auth0-issued access token correctly conta… --- ## [View only M2M credentials on a per application basis](https://community.auth0.com/t/view-only-m2m-credentials-on-a-per-application-basis/189051)
**Author:** [@HideNSeekMF](https://community.auth0.com/u/HideNSeekMF)\ **Replies:** 1\ **Last updated:** [July 22, 2025, 11:48am UTC](https://community.auth0.com/t/view-only-m2m-credentials-on-a-per-application-basis/189051 "2025-07-22T11:48:45Z")
Feature: View only M2M credentials on a per application basis Description: When creating a user in a tenant, there is the ability to give “Editor - Specific Apps”, but not option for “Viewer - Specific Apps” or, even be… --- ## [Leverage RBAC permissions in a regular Web Asp.Net Core Application](https://community.auth0.com/t/leverage-rbac-permissions-in-a-regular-web-asp-net-core-application/46727)
**Author:** [@samuel.pecoul](https://community.auth0.com/u/samuel.pecoul)\ **Replies:** 2\ **Last updated:** [October 6, 2023, 12:23am UTC](https://community.auth0.com/t/leverage-rbac-permissions-in-a-regular-web-asp-net-core-application/46727 "2023-10-06T00:23:40Z")
Hello ! My company want to switch from an old “home made” authentication/authorization system to Auth0 for all of their applications (mainly regular AspNet Core App). This ‘legacy’ authorization system is based on ‘per… --- ## [Empty "permissions" claim in M2M token](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112)
**Author:** [@kvirk](https://community.auth0.com/u/kvirk)\ **Replies:** 6\ **Last updated:** [June 9, 2023, 10:59am UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112 "2023-06-09T10:59:34Z")
Hi, I have created an API and added scopes/permissions to it and allowed a machine-to-machine app to access it with all the permissions enabled. When I am trying to fetch the access\_token via postman, the token I receiv… --- ## [How can I scope a user's role to a specific instance of a resource?](https://community.auth0.com/t/how-can-i-scope-a-users-role-to-a-specific-instance-of-a-resource/96033)
**Author:** [@mattcouts](https://community.auth0.com/u/mattcouts)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 3:51pm UTC](https://community.auth0.com/t/how-can-i-scope-a-users-role-to-a-specific-instance-of-a-resource/96033 "2022-12-08T15:51:11Z")
I have an application that displays information about upcoming events (a birthday party, for example). For any event, a user should be able to serve as either a PARTICIPANT or ADMIN (these are the two application roles) … --- ## [Give all permissions to a M2M app on Auth0 Management API](https://community.auth0.com/t/give-all-permissions-to-a-m2m-app-on-auth0-management-api/92740)
**Author:** [@rivindu](https://community.auth0.com/u/rivindu)\ **Replies:** 3\ **Last updated:** [October 21, 2022, 9:08pm UTC](https://community.auth0.com/t/give-all-permissions-to-a-m2m-app-on-auth0-management-api/92740 "2022-10-21T21:08:08Z")
Hi, I want to know if there is a way to give all permissions to a m2m app for management API when provisioning a client grant in terraform data "auth0\_tenant" "yl\_test\_dev" {} resource "auth0\_client\_grant" "m2m\_client… --- ## [Adding additional scopes to the Google Workspace connection setup](https://community.auth0.com/t/adding-additional-scopes-to-the-google-workspace-connection-setup/91689)
**Author:** [@dmitry2](https://community.auth0.com/u/dmitry2)\ **Replies:** 1\ **Last updated:** [October 10, 2022, 9:18pm UTC](https://community.auth0.com/t/adding-additional-scopes-to-the-google-workspace-connection-setup/91689 "2022-10-10T21:18:56Z")
Hi! I’m trying to implement a Google Workspace connection, with custom scopes. The logic of my application is as follows: All users log in through Google Workspace connection, and then there is a separate page for the … --- ## [How to add user permissions to ID token](https://community.auth0.com/t/how-to-add-user-permissions-to-id-token/88714)
**Author:** [@aaron.hardy](https://community.auth0.com/u/aaron.hardy)\ **Replies:** 6\ **Last updated:** [September 20, 2022, 1:57am UTC](https://community.auth0.com/t/how-to-add-user-permissions-to-id-token/88714 "2022-09-20T01:57:20Z")
Hey community. From our single-page application, we want to know the current user’s permission so we can control access to certain sections or buttons of our app. We’re using organizations. As you’re probably aware, per… --- ## [How to get user permissions by application](https://community.auth0.com/t/how-to-get-user-permissions-by-application/88550)
**Author:** [@bguzman](https://community.auth0.com/u/bguzman)\ **Replies:** 1\ **Last updated:** [August 26, 2022, 9:10pm UTC](https://community.auth0.com/t/how-to-get-user-permissions-by-application/88550 "2022-08-26T21:10:45Z")
Hi !! I need to obtain the permissions of a user for a specific application. My goal is to avoid sending those permissions in the user’s access token, is there any way to do this? Thanks in advance. :slight\_smile: --- ## [Permissions in authorized applications](https://community.auth0.com/t/permissions-in-authorized-applications/89441)
**Author:** [@hamza.hafiane](https://community.auth0.com/u/hamza.hafiane)\ **Replies:** 2\ **Last updated:** [August 26, 2022, 8:26am UTC](https://community.auth0.com/t/permissions-in-authorized-applications/89441 "2022-08-26T08:26:29Z")
as you can see i have only ‘openid profile email’ in the permissions bloc in Authorized Applications, however i do have a list of permissions like create:users update:users delete:users etc … in Permissions But i can… --- ## [How to get directly assigned permissions in access token?](https://community.auth0.com/t/how-to-get-directly-assigned-permissions-in-access-token/86550)
**Author:** [@rjoshi\_auth0](https://community.auth0.com/u/rjoshi_auth0)\ **Replies:** 1\ **Last updated:** [July 6, 2022, 11:15pm UTC](https://community.auth0.com/t/how-to-get-directly-assigned-permissions-in-access-token/86550 "2022-07-06T23:15:32Z")
With RBAC enabled and turning ‘Add Permissions in the Access Token’ On, I can get permissions that are applied via roles. But I have added some permissions that are directly assigned to user without any roles. Can’t thos… --- ## [Auth0 JWT does not have permissions](https://community.auth0.com/t/auth0-jwt-does-not-have-permissions/82849)
**Author:** [@DispatchCode](https://community.auth0.com/u/DispatchCode)\ **Replies:** 11\ **Last updated:** [May 17, 2022, 2:58pm UTC](https://community.auth0.com/t/auth0-jwt-does-not-have-permissions/82849 "2022-05-17T14:58:57Z")
Hello, we’re trying to use scopes for our application (PHP + Laravel framework) and the JWT returned by Auth0 doesn’t seem to have the requested permissions. We did the following after installing the SDK: we created a… --- ## [Access user permissions array in user token](https://community.auth0.com/t/access-user-permissions-array-in-user-token/83024)
**Author:** [@tkiddle](https://community.auth0.com/u/tkiddle)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 6:08pm UTC](https://community.auth0.com/t/access-user-permissions-array-in-user-token/83024 "2022-05-06T18:08:11Z")
Why on earth is it so difficult to access a user’s “permissions” from within a react application? I have a single-page application, and my user has some roles and permissions attached to it. I can create a custom rule … --- ## [Auth0 Permission Check with NextJS](https://community.auth0.com/t/auth0-permission-check-with-nextjs/82175)
**Author:** [@ar4891](https://community.auth0.com/u/ar4891)\ **Replies:** 1\ **Last updated:** [April 22, 2022, 12:44am UTC](https://community.auth0.com/t/auth0-permission-check-with-nextjs/82175 "2022-04-22T00:44:53Z")
I use React + Auth0 + NextJS for server rendering. Currently I do export const getServerSideProps = withPageAuthRequired({ getServerSideProps: async (context: GetServerSidePropsContext) =\> { return {} ;// Return n… --- ## [How to fetch roles with permissions dynamically as part of access token, if user has multiple roles and permissions](https://community.auth0.com/t/how-to-fetch-roles-with-permissions-dynamically-as-part-of-access-token-if-user-has-multiple-roles-and-permissions/80459)
**Author:** [@selvi](https://community.auth0.com/u/selvi)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 11:44pm UTC](https://community.auth0.com/t/how-to-fetch-roles-with-permissions-dynamically-as-part-of-access-token-if-user-has-multiple-roles-and-permissions/80459 "2022-04-15T23:44:49Z")
Added rule Which I have it, getting roles and permissions separately as part of access token, attached the decode token below. But I am expecting json response as below roles and permissions need to be associated like b… --- ## [Unable to add permission via UI](https://community.auth0.com/t/unable-to-add-permission-via-ui/79979)
**Author:** [@selvi](https://community.auth0.com/u/selvi)\ **Replies:** 2\ **Last updated:** [March 30, 2022, 5:46am UTC](https://community.auth0.com/t/unable-to-add-permission-via-ui/79979 "2022-03-30T05:46:13Z")
I am trying to create permission via UI. Refereed this link for enabling RBAC. But I don’t find enable the RBAC option under Application settings. Refer the screenshot attached here, this screen doesn’t present unde… --- ## [More precisions about why 2 extrat permissions are needed with Azure AD connection](https://community.auth0.com/t/more-precisions-about-why-2-extrat-permissions-are-needed-with-azure-ad-connection/73782)
**Author:** [@benoit.tigeot](https://community.auth0.com/u/benoit.tigeot)\ **Replies:** 2\ **Last updated:** [November 26, 2021, 4:37pm UTC](https://community.auth0.com/t/more-precisions-about-why-2-extrat-permissions-are-needed-with-azure-ad-connection/73782 "2021-11-26T16:37:38Z")
Hello On the documentation about Azure AD. There is a part about permissions. I would like to know when two “Permissions” are required? After reading Microsoft Graph permissions reference this is still no clear why tho… --- ## [M2M + API: empty permissions](https://community.auth0.com/t/m2m-api-empty-permissions/72700)
**Author:** [@juan.garbora](https://community.auth0.com/u/juan.garbora)\ **Replies:** 5\ **Last updated:** [November 8, 2021, 5:41pm UTC](https://community.auth0.com/t/m2m-api-empty-permissions/72700 "2021-11-08T17:41:27Z")
Hi there . I have one API with one permission, with “Enable RBAC” and “Add permissions in the Access token” enabled. Then I have one application Machine to Machine. The application is Authorized in the API. When I ge… --- ## [Get User permissions within an organisation](https://community.auth0.com/t/get-user-permissions-within-an-organisation/70756)
**Author:** [@nicky.thorne](https://community.auth0.com/u/nicky.thorne)\ **Replies:** 3\ **Last updated:** [October 6, 2021, 7:12pm UTC](https://community.auth0.com/t/get-user-permissions-within-an-organisation/70756 "2021-10-06T19:12:01Z")
We have users who can be assigned to multiple Auth0 organisations. Under these organisations they can have different permissions setup depending on the role chosen at the point of invitation. For our application, we nee… --- ## [Append new Permission using Management API](https://community.auth0.com/t/append-new-permission-using-management-api/68624)
**Author:** [@hadeel](https://community.auth0.com/u/hadeel)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 9:48pm UTC](https://community.auth0.com/t/append-new-permission-using-management-api/68624 "2021-08-26T21:48:57Z")
Is there a way to append a new Permission to an already existing API Permissions through Management API? I followed the following example Add API Permissions but it removes existing permissions and only adds the new one… --- ## [Organization and permissions](https://community.auth0.com/t/organization-and-permissions/65588)
**Author:** [@roneny](https://community.auth0.com/u/roneny)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 3:57pm UTC](https://community.auth0.com/t/organization-and-permissions/65588 "2021-07-06T15:57:51Z")
Hi, When I set my single page application to use “Team members of an organization” in the organization tab I stop receiving the permissions in the token after the login. When it being set to “Both” or “Individuals for p… --- ## [How large can custom claims be for IdToken?](https://community.auth0.com/t/how-large-can-custom-claims-be-for-idtoken/63376)
**Author:** [@mohammadz](https://community.auth0.com/u/mohammadz)\ **Replies:** 4\ **Last updated:** [May 27, 2021, 11:06am UTC](https://community.auth0.com/t/how-large-can-custom-claims-be-for-idtoken/63376 "2021-05-27T11:06:25Z")
Hi, A quick question, What is the maximum size limit for adding a custom claim to an idToken? I’m debating whether I should use roles and permissions via the custom claims and IdToken. Or just use the management API vi… --- ## [CRM with Auth0 authorization core roles](https://community.auth0.com/t/crm-with-auth0-authorization-core-roles/61985)
**Author:** [@mohammadz](https://community.auth0.com/u/mohammadz)\ **Replies:** 3\ **Last updated:** [May 7, 2021, 8:16am UTC](https://community.auth0.com/t/crm-with-auth0-authorization-core-roles/61985 "2021-05-07T08:16:44Z")
Hi, I’m build a SaaS platform with the help of auth0 as and IdP provider. Auth0 is great at handling the authentication and authorization aspect for the platform and I’m grateful for that. I’m exploring the roles and p… --- ## [Permissions inside a react app](https://community.auth0.com/t/permissions-inside-a-react-app/62088)
**Author:** [@fabian.boerner](https://community.auth0.com/u/fabian.boerner)\ **Replies:** 1\ **Last updated:** [May 4, 2021, 9:19pm UTC](https://community.auth0.com/t/permissions-inside-a-react-app/62088 "2021-05-04T21:19:43Z")
Hi, im looking for away to get the permissions in react frontend. Roles alone will not fit because the role only determines what permissions youve got and to make a role for every permission is a little bit much. I no… --- ## [ManyToMany Permissions](https://community.auth0.com/t/manytomany-permissions/59852)
**Author:** [@RSalo](https://community.auth0.com/u/RSalo)\ **Replies:** 2\ **Last updated:** [March 25, 2021, 12:30pm UTC](https://community.auth0.com/t/manytomany-permissions/59852 "2021-03-25T12:30:26Z")
Hi all. I have users that are having crossing permissions between each other. For example, the first user can ignore the second user when the second one doesn’t. Couldn’t find an appropriate topic with the solution. I pr… --- ## [Permissions naming convention](https://community.auth0.com/t/permissions-naming-convention/59944)
**Author:** [@miguelcabgil](https://community.auth0.com/u/miguelcabgil)\ **Replies:** 1\ **Last updated:** [March 24, 2021, 3:32pm UTC](https://community.auth0.com/t/permissions-naming-convention/59944 "2021-03-24T15:32:15Z")
Hi everyone. I’m new to this community and i would like to know if there’s a naming convention or a pattern for auth0 permissions. I know the main convention is, e.g: create:user, read:user, etc… What about create:com… --- ## [Conditional multi-factor rule removes permissions from JWT](https://community.auth0.com/t/conditional-multi-factor-rule-removes-permissions-from-jwt/35403)
**Author:** [@alex16](https://community.auth0.com/u/alex16)\ **Replies:** 8\ **Last updated:** [March 9, 2021, 2:45pm UTC](https://community.auth0.com/t/conditional-multi-factor-rule-removes-permissions-from-jwt/35403 "2021-03-09T14:45:18Z")
Hello, In my setup the API has RBAC enabled as well as Add Permissions in the Access Token. At the same time there is a conditional MFA rule as following: function (user, context, callback) { if (context.clientID ==… [Next page](https://community.auth0.com/tag/permissions/433.md?match_all_tags=true&page=1&tags%5B%5D=permissions)