Create Roles

You can create roles using Auth0’s Dashboard or the . Roles work with the API Authorization Core feature set. You can create two types of roles in Auth0:

Tenant roles: Apply across your entire tenant and can be assigned to any user.
Organization roles: Scoped to a specific organization. Users can hold different organization roles in each organization they belong to. To learn more, read Organization Roles.

Prerequisites

For role-based access control (RBAC) to work properly, you must enable it for your API using either the Dashboard or the Management API. The Authorization Core functionality is different from the Authorization Extension. For a comparison, read Authorization Core vs. Authorization Extension.
Set up an API in the .
Permissions come from predefined values. If your list of permissions is blank, you need to add permissions to your API.

Create a tenant role

Tenant roles apply across an entire tenant and you can assign them to any user regardless of Organization membership.

Auth0 Dashboard
Management API

Go to Dashboard > User Management > Roles and select Create Role.
Name the role and add a description, then select Create.

Make a POST call to the Create Role endpoint. Be sure to replace MGMT_API_ACCESS_TOKEN, ROLE_NAME, and ROLE_DESC placeholder values with your Management API , role name, and role description, respectively.

Value	Description
`MGMT_API_ACCESS_TOKEN`	Access Token for the Management API with the scope `create:roles`.
`ROLE_NAME`	Name of the role you want to create.
`ROLE_DESC`	User-friendly description of the role.

Create an Organization role

You create Organization roles from within the Organization management view. Tenant admins can create up to 350 Organization roles per Organization.

Auth0 Dashboard
Management API

Go to Dashboard > Organizations and select the Organization.
Select the Roles tab, then select Create Role.
Enter a name and description for the role, then select Create.

Make a POST call to the Create Role endpoint. Set type to "organization" and set owner_id to the Organization ID. Be sure to replace MGMT_API_ACCESS_TOKEN, ROLE_NAME, ROLE_DESC, and ORG_ID placeholder values with your Management API , role name, role description, and Organization ID, respectively.

cURL

curl --request POST \
  --url 'https://{yourDomain}/api/v2/roles' \
  --header 'authorization: Bearer MGMT_API_ACCESS_TOKEN' \
  --header 'cache-control: no-cache' \
  --header 'content-type: application/json' \
  --data '{ "name": "ROLE_NAME", "description": "ROLE_DESC", "type": "organization", "owner_id": "ORG_ID" }'

Value	Description
`MGMT_API_ACCESS_TOKEN`	Access Token for the Management API with the scope `create:roles`.
`ROLE_NAME`	Name of the Organization role you want to create. Must be unique within the Organization.
`ROLE_DESC`	User-friendly description of the role.
`ORG_ID`	ID of the Organization in which to create the role.

The response includes type: "organization" and owner_id confirming the role is organization-scoped.

Manage Users

Manage Access

Prerequisites

Create a tenant role

Create an Organization role

Learn more

​Prerequisites

​Create a tenant role

​Create an Organization role

​Learn more

Prerequisites

Create a tenant role

Create an Organization role

Learn more