RBAC - Internal Roles

Overview

We have the following customer and employee groups.

Group	Role
Guest	customer:guest
Registered	customer:registered
RCC	customer:rcc
Industry Partner Programme (IPP)	customer:ipp
Ambassador	customer:ambassador
EF	customer:pro
Board	customer:board
Investors	customer:investors
Staff*	customer:staff
Trading*	customer:trading

• Employee Groups

These should be created prior to assigning them to users during lazy migration.

Example Usage

resource "auth0_user" "my_user" {
  connection_name = "Username-Password-Authentication"
  user_id         = "auth0|1234567890"
  email           = "test@test.com"
  password        = "passpass$12$12"
  nickname        = "test"
  username        = "test"
  roles           = [auth0_role.my_role.id]
}

resource "auth0_role" "my_role" {
  name        = "My Role - (Managed by Terraform)"
  description = "Role Description..."

  permissions {
    name                       = "customer:registered"
  }
}

Assign Roles to Users

Roles can also be assigned via the Dashboard. There are two ways to do this. You can choose a user from the Users list and then assign a role or you can go to the User Details (user profile) page for an individual user and choose a role to assign in the Roles tab. For customer roles/groups we recommend these to take place via Dixa. More information on the custom card integration can be found here.

Assign roles in user list

Go to Dashboard > User Management > Users.

Click ... next to the user you want to modify, and select Assign Roles.

Choose the role(s) you wish to assign, then click Assign.

Assign roles in user profile

You can also assign roles to users from their individual profile page.

Go to Dashboard > User Management > Users and click the name of the user.

Click the Roles view, and click Assign Role.

Choose the role you wish to assign and click Assign.

Resources

• Assign Roles to Users