Skip to main content
Rules will reach end of life (EOL) on January 31, 2028.
  • As of October 16, 2023, Rules are no longer available in newly created tenants.
  • As of November 18, 2024, Rules are read-only. Active Rules still run, and you can enable or disable them and change their configuration values and secrets. You can’t edit their code in the Dashboard, the Management API, or tools that use it, such as the Auth0 CLI, Deploy CLI, Terraform, and Agent Skills.
  • After January 31, 2028, Rules stop running and are removed.
Use Actions to extend Auth0:
Auth0 provides two ways to implement role-based access control (RBAC), which you can use in place of or in combination with your API’s own internal access control system:The Authorization Core feature set matches the functionality of the Authorization Extension, improves performance and scalability, and provides a more flexible RBAC system than the Authorization Extension.Currently, both implement the key features of RBAC and allow you to restrict the custom scopes defined for an API to those that have been assigned to the user as permissions.
One of the major changes between versions 1 and 2 of the Authorization Extension is the removal of the Applications section. This section was removed to simplify its inherent complexity, such as when it was used to define a policy for access control. The desired approach for such use cases is to use rules.

​
Upgrade extension version

To upgrade the Authorization Extension, go to Auth0 Dashboard > Extensions, and select the Installed Extensions view. On the Authorization Extension row, you’ll see a link that will begin the upgrade process to the latest version.