# Auth0 Changelog - v202631

## v202631 - added
*July 29, 2026*

### Organization-to-Application Entitlement - Early Access

**Organization-to-App Entitlement** lets you control which applications the members of an organization can access - natively, without custom code.

If you sell multiple products and different customers have purchased different combinations, you can now enforce those boundaries directly in Auth0. When a member of an org tries to log in to an app they're not entitled to, Auth0 denies access automatically. No Actions. No metadata checks. No custom logic to maintain.

**Opt-in, per org.** Entitlement enforcement is disabled by default - existing orgs and login flows are unaffected until you explicitly enable it. You can roll out to one org at a time, making it safe to adopt incrementally.

**Safe to configure before you go live.** You can set up all your entitlements first, then enable enforcement when you're ready. There's no risk of locking members out during configuration.

![org-to-app](//images.ctfassets.net/kbkgmx9upatd/rUfIbrGmUfR5DgFtEtZXB/2bae811541e02ba9905a790e4d1648cf/dbf50f9c-b7c6-474a-98e4-34c90d325c83.png)

To learn more, review [Grant Per-Application Access to an Organization](https://auth0.com/docs/manage-users/organizations/configure-organizations/grant-application-access "Grant Per-Application Access to an Organization").  

By using Organization-to-Application Entitlement, you agree to the applicable Free Trial terms in Okta’s Master Subscription Agreement and Okta’s Privacy Policy during use of the Early Access feature. The Free Trial terms can be found within the Master Subscription Agreement at [https://www.okta.com/agreements](https://www.okta.com/agreements.).

### Organization-Level Roles - Early Access

You can now create roles scoped to individual organizations — without metadata workarounds or custom Actions logic.

__What's new__

Auth0 Organizations previously required you to share tenant-wide roles across all your customer organizations. With org-scoped roles, each organization gets its own role definitions, independent permissions, and user assignments. 

__What you can do in EA__

- Create, update, and delete roles within a specific organization via the Management API or Dashboard
- Assign org-scoped roles to users and enterprise groups
- Pre-assign a role when inviting a user to an organization

__What stays the same__

Existing tenant-level RBAC is unchanged. Tenants not using org-scoped roles are unaffected.

To learn more, review [Organization Roles](https://auth0.com/docs/manage-users/organizations/organization-roles "Organization Roles"). 

By using Organization-to-Application Entitlement, you agree to the applicable Free Trial terms in Okta’s Master Subscription Agreement and Okta’s Privacy Policy during use of the Early Access feature. The Free Trial terms can be found within the Master Subscription Agreement at [https://www.okta.com/agreements](https://www.okta.com/agreements.).

---