Auth0 Role Based Access — Implementing RBAC with Auth0

// Create role with permissions
const role = await auth0.roles.create({
  name: 'scan_operator',
  description: 'Can initiate and view scan results'
});

// Assign permissions to role
await auth0.roles.addPermissions(
  { id: role.data.id },
  { permissions: [
    { resource_server_identifier: 'https://scan-api.example.com',
      permission_name: 'scan:create' },
    { resource_server_identifier: 'https://scan-api.example.com',
      permission_name: 'scan:read' }
  ]}
);

// Assign role to user
await auth0.users.assignRoles(
  { id: 'auth0|user123' },
  { roles: [role.data.id] }
);