The core Authorization features of Auth0 allow for role-based access control (RBAC) of your APIs.

For RBAC to work properly, you must enable it for your API using either the Dashboard or the Management API.

Authorization Core functionality is different from the Authorization Extension. For a comparison between the two products, see Authorization Core vs. Authorization Extension.

To use the core functionality most efficiently, you should do the following:

1. Register API with Auth0

2. Define permissions for API

3. Create roles

4. Assign roles to users

5. Assign permissions to users, if needed.

• Entity Limit Policy