Describes Auth0’s tenant entity limit policy for subscribers.
Entities in Auth0 are tenant configuration elements such as Applications, Connections, Organizations, API , Permissions, Roles, Actions.
Entity limits are hard limits on entities that are enforced for the health of our platform; they are not a component of pricing, though they can differ for groups of pricing plans. Individual pricing plans have separate limitations, which refer to the entitlements like MAU and Enterprise Connections you receive when you subscribe to a given plan. (To learn what your pricing plan limitations are, see Auth0 Pricing.)
Any use of the term “unlimited” means that there are no hard limits, but Okta sets system limitations on the threshold. Please reach out to support if you have any questions on these limits.
M2M Client Grants per Organization (Private Cloud)
1000
Custom Token Exchange Profiles
100
Customers on Enterprise plans can request increased entity limits for Organizations per tenant and Organization members per Organization by contacting support.These limits can be increased to 2,000,000 Organizations per tenant and 2,000,000 Organization members per Organization on public cloud. On private cloud instances, these entities are unlimited.
Authorization Core Role-Based Access Control (RBAC)
Entity
Limit
Roles per Tenant
1000
Scopes per API (Resource Servers)
1000
Roles per User
50
Permissions per User
1000
Permissions per Role
1000
Note that limitations on Permissions per user affect directly assigned Permissions.Technically, a user could have more Permissions than noted if you assign the Permissions to different Roles and then assign the Roles to the User.
Entity
Limit
Refresh Token per User per Application
200
If you reach the limit and create a new Refresh Token,
the system revokes or deletes the oldest token for that user in the
Application.Revoked tokens and expired tokens do not count against the limit.
Actions and Actions Modules limits include both deployed and undeployed entities. When you delete them, they no longer count toward the specific limit.Action Versions and Action Module Versions limits include both draft and active. Once you reach the limit, adding every additional version results in Auth0 deleting the oldest unused version.
