title: Auth0Role kind: Auth0Role provider: auth0 api_version: auth0.openmcf.org/v1 id_prefix: a0role description: Manage Auth0 Roles — named collections of API permissions that implement role-based access control (RBAC) for assignment to users.
Auth0Role
Manage Auth0 Roles — named collections of API permissions (scopes) that implement Auth0's role-based access control (RBAC). A role groups scopes defined on one or more Auth0 Resource Servers and can be assigned to users, giving them the role's permissions in their access tokens.
Provider
Auth0
Category
Identity & Access Management
Use Cases
- Define standard access tiers (Administrator, Editor, Viewer) for an application
- Group API scopes into reusable roles for assignment to users
- Aggregate permissions across multiple resource servers (APIs) into one role
- Manage role-to-permission mappings as version-controlled infrastructure
Related Components
- Auth0ResourceServer — defines the APIs and scopes (permissions) that roles grant
- Auth0Client — applications whose users are assigned roles
- Auth0Action — post-login actions can read a user's roles to enrich tokens
Next article
Auth0 Client
Auth0 Client Deploys an Auth0 Application (Client) with configurable OAuth flows, token settings, and optional API access grants. Supports all four Auth0 application types — native, SPA, regular web, and machine-to-machine — with full control over callbacks, refresh token behavior, JWT signing, and organization-aware authentication. What Gets Created When you deploy an Auth0Client resource, OpenMCF provisions: Auth0 Client (Application) — an auth0client resource configured with the specified...