title: Auth0Role kind: Auth0Role provider: auth0 api_version: auth0.openmcf.org/v1 id_prefix: a0role description: Manage Auth0 Roles — named collections of API permissions that implement role-based access control (RBAC) for assignment to users.

Auth0Role

Manage Auth0 Roles — named collections of API permissions (scopes) that implement Auth0's role-based access control (RBAC). A role groups scopes defined on one or more Auth0 Resource Servers and can be assigned to users, giving them the role's permissions in their access tokens.

Provider

Auth0

Category

Identity & Access Management

Use Cases

  • Define standard access tiers (Administrator, Editor, Viewer) for an application
  • Group API scopes into reusable roles for assignment to users
  • Aggregate permissions across multiple resource servers (APIs) into one role
  • Manage role-to-permission mappings as version-controlled infrastructure
  • Auth0ResourceServer — defines the APIs and scopes (permissions) that roles grant
  • Auth0Client — applications whose users are assigned roles
  • Auth0Action — post-login actions can read a user's roles to enrich tokens

Next article

Auth0 Client

Auth0 Client Deploys an Auth0 Application (Client) with configurable OAuth flows, token settings, and optional API access grants. Supports all four Auth0 application types — native, SPA, regular web, and machine-to-machine — with full control over callbacks, refresh token behavior, JWT signing, and organization-aware authentication. What Gets Created When you deploy an Auth0Client resource, OpenMCF provisions: Auth0 Client (Application) — an auth0client resource configured with the specified...
Read next article