Create and Configure the Deploy CLI Application Manually
To use the Deploy CLI Tool, your tenant must be configured appropriately. Generally, you do this programmatically by installing the Deploy CLI extension, which will create and configure an Application that is authorized to call the Management API.
Sometimes, however, you may wish to create and configure this application manually. You may also want to modify scopes for an application that has been created previously by the extension.
Create the initial Deploy CLI Application
To create and configure the initial Deploy CLI Application:
Navigate to Auth0 Dashboard > Applications, and click + Create Application.
auth0-deploy-cli-extensionas the name for your Application, select Machine to Machine Applications, and click Create.
When asked which API you want to call from your application, select Auth0 Management API.
Select the required permissions (scopes) (see "Required API permissions" section below) to enable them for your Application, and click Authorize. These scopes will be issued as part of your Application's access token.
Modify Deploy CLI Application scopes
To modify permissions (scopes) for an application that has been created previously:
Navigate to Auth0 Dashboard > Applications, and click the
Required API permissions
The following permissions (scopes) are required to be enabled on the
auth0-deploy-cli-extension Application to ensure it is configured for proper access to the Management API.
- create:client_grants - read:client_grants - update:client_grants - delete:client_grants - create:clients - read:clients - update:clients - delete:clients - create:client_keys - read:client_keys - update:client_keys - delete:client_keys - create:connections - read:connections - update:connections - delete:connections - create:resource_servers - read:resource_servers - update:resource_servers - delete:resource_servers - create:rules - read:rules - update:rules - delete:rules - create:hooks - read:hooks - update:hooks - delete:hooks - read:rules_configs - update:rules_configs - delete:rules_configs - create:email_provider - read:email_provider - update:email_provider - delete:email_provider - read:tenant_settings - update:tenant_settings - read:grants - delete:grants - read:guardian_factors - update:guardian_factors - create:email_templates - read:email_templates - update:email_templates - create:roles - read:roles - update:roles - delete:roles - read:prompts - update:prompts - read:branding - update:branding