> ## Documentation Index > Fetch the complete documentation index at: https://docs-staging-quickstart-revamp.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. > Learn how to assign roles to a user using the Auth0 Dashboard or the Management API. # Assign Roles to Users You can assign [roles](/docs/manage-users/access-control/rbac) to a user using the Auth0 Dashboard or the Management API. The assigned roles can be used with the API Authorization Core feature set. ## Prerequisites * For role-based access control (RBAC) to work properly, you must enable it for your API using either the Dashboard or the Management API. The Authorization Core functionality is different from the Authorization Extension. For a comparison, read [Authorization Core vs. Authorization Extension](/docs/manage-users/access-control/authorization-core-vs-authorization-extension). * Roles are selected from pre-defined values. If your list of roles is blank, make sure you [create roles](/docs/manage-users/access-control/configure-core-rbac/roles/create-roles) first. ## Dashboard There are two ways to assign a role to a user. You can choose a user from the **Users** list and then assign a role or you can go to the **User Details** (user profile) page for an individual user and choose a role to assign in the **Roles** tab. If you have more than 50 roles, only the first 50 are shown in the Roles tab. Other roles may be assigned via the Management API. ### Assign roles in user list 1. Go to [Dashboard > User Management > Users](https://manage.auth0.com/#/users). 2. Click `...` next to the user you want to modify, and select **Assign Roles**. 3. Choose the role(s) you wish to assign, then click **Assign**. ### Assign roles in user profile You can also assign roles to users from their individual profile page. 1. Go to [Dashboard > User Management > Users](https://manage.auth0.com/#/users) and click the name of the user. 2. Click the **Roles** view, and click **Assign Role**. 3. Choose the role you wish to assign and click **Assign.** ## Management API Make a `POST` call to the [Assign User Roles endpoint](https://auth0.com/docs/api/management/v2#!/Users/post_user_roles). Be sure to replace `USER_ID`, `MGMT_API_ACCESS_TOKEN`, and `ROLE_ID` placeholder values with your user ID, Management API access token, and role ID(s), respectively. ```bash cURL lines curl --request POST \ --url 'https://{yourDomain}/api/v2/users/USER_ID/roles' \ --header 'authorization: Bearer MGMT_API_ACCESS_TOKEN' \ --header 'cache-control: no-cache' \ --header 'content-type: application/json' \ --data '{ "roles": [ "ROLE_ID", "ROLE_ID" ] }' ``` ```csharp C# lines var client = new RestClient("https://{yourDomain}/api/v2/users/USER_ID/roles"); var request = new RestRequest(Method.POST); request.AddHeader("content-type", "application/json"); request.AddHeader("authorization", "Bearer MGMT_API_ACCESS_TOKEN"); request.AddHeader("cache-control", "no-cache"); request.AddParameter("application/json", "{ \"roles\": [ \"ROLE_ID\", \"ROLE_ID\" ] }", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```go Go lines expandable package main import ( "fmt" "strings" "net/http" "io/ioutil" ) func main() { url := "https://{yourDomain}/api/v2/users/USER_ID/roles" payload := strings.NewReader("{ \"roles\": [ \"ROLE_ID\", \"ROLE_ID\" ] }") req, _ := http.NewRequest("POST", url, payload) req.Header.Add("content-type", "application/json") req.Header.Add("authorization", "Bearer MGMT_API_ACCESS_TOKEN") req.Header.Add("cache-control", "no-cache") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```java Java lines HttpResponse response = Unirest.post("https://{yourDomain}/api/v2/users/USER_ID/roles") .header("content-type", "application/json") .header("authorization", "Bearer MGMT_API_ACCESS_TOKEN") .header("cache-control", "no-cache") .body("{ \"roles\": [ \"ROLE_ID\", \"ROLE_ID\" ] }") .asString(); ``` ```javascript Node.JS lines var axios = require("axios").default; var options = { method: 'POST', url: 'https://{yourDomain}/api/v2/users/USER_ID/roles', headers: { 'content-type': 'application/json', authorization: 'Bearer MGMT_API_ACCESS_TOKEN', 'cache-control': 'no-cache' }, data: {roles: ['ROLE_ID', 'ROLE_ID']} }; axios.request(options).then(function (response) { console.log(response.data); }).catch(function (error) { console.error(error); }); ``` ```obj-c Obj-C lines expandable #import NSDictionary *headers = @{ @"content-type": @"application/json", @"authorization": @"Bearer MGMT_API_ACCESS_TOKEN", @"cache-control": @"no-cache" }; NSDictionary *parameters = @{ @"roles": @[ @"ROLE_ID", @"ROLE_ID" ] }; NSData *postData = [NSJSONSerialization dataWithJSONObject:parameters options:0 error:nil]; NSMutableURLRequest *request = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:@"https://{yourDomain}/api/v2/users/USER_ID/roles"] cachePolicy:NSURLRequestUseProtocolCachePolicy timeoutInterval:10.0]; [request setHTTPMethod:@"POST"]; [request setAllHTTPHeaderFields:headers]; [request setHTTPBody:postData]; NSURLSession *session = [NSURLSession sharedSession]; NSURLSessionDataTask *dataTask = [session dataTaskWithRequest:request completionHandler:^(NSData *data, NSURLResponse *response, NSError *error) { if (error) { NSLog(@"%@", error); } else { NSHTTPURLResponse *httpResponse = (NSHTTPURLResponse *) response; NSLog(@"%@", httpResponse); } }]; [dataTask resume]; ``` ```php PHP lines expandable $curl = curl_init(); curl_setopt_array($curl, [ CURLOPT_URL => "https://{yourDomain}/api/v2/users/USER_ID/roles", CURLOPT_RETURNTRANSFER => true, CURLOPT_ENCODING => "", CURLOPT_MAXREDIRS => 10, CURLOPT_TIMEOUT => 30, CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1, CURLOPT_CUSTOMREQUEST => "POST", CURLOPT_POSTFIELDS => "{ \"roles\": [ \"ROLE_ID\", \"ROLE_ID\" ] }", CURLOPT_HTTPHEADER => [ "authorization: Bearer MGMT_API_ACCESS_TOKEN", "cache-control: no-cache", "content-type: application/json" ], ]); $response = curl_exec($curl); $err = curl_error($curl); curl_close($curl); if ($err) { echo "cURL Error #:" . $err; } else { echo $response; } ``` ```python Python lines import http.client conn = http.client.HTTPSConnection("") payload = "{ \"roles\": [ \"ROLE_ID\", \"ROLE_ID\" ] }" headers = { 'content-type': "application/json", 'authorization': "Bearer MGMT_API_ACCESS_TOKEN", 'cache-control': "no-cache" } conn.request("POST", "/{yourDomain}/api/v2/users/USER_ID/roles", payload, headers) res = conn.getresponse() data = res.read() print(data.decode("utf-8")) ``` ```ruby Ruby lines require 'uri' require 'net/http' require 'openssl' url = URI("https://{yourDomain}/api/v2/users/USER_ID/roles") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true http.verify_mode = OpenSSL::SSL::VERIFY_NONE request = Net::HTTP::Post.new(url) request["content-type"] = 'application/json' request["authorization"] = 'Bearer MGMT_API_ACCESS_TOKEN' request["cache-control"] = 'no-cache' request.body = "{ \"roles\": [ \"ROLE_ID\", \"ROLE_ID\" ] }" response = http.request(request) puts response.read_body ``` ```swift Swift lines expandable import Foundation let headers = [ "content-type": "application/json", "authorization": "Bearer MGMT_API_ACCESS_TOKEN", "cache-control": "no-cache" ] let parameters = ["roles": ["ROLE_ID", "ROLE_ID"]] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://{yourDomain}/api/v2/users/USER_ID/roles")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "POST" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ``` | Value | Description | | ----------------------- | --------------------------------------------------------------------------------------------------------------------------------------- | | `USER_ID` | Τhe ID of the user to be updated. | | `MGMT_API_ACCESS_TOKEN` | [Access Token for the Management API](https://auth0.com/docs/api/management/v2/tokens) with the scopes `read:roles` and `update:users`. | | `ROLE_ID` | ID(s) of the role(s) you would like to add for the specified user. | ## Learn more * [Manage Role-Based Access Control Roles](/docs/manage-users/access-control/configure-core-rbac/roles) * [View Roles Assigned to Users](/docs/manage-users/access-control/configure-core-rbac/rbac-users/view-user-roles) * [Create Roles](/docs/manage-users/access-control/configure-core-rbac/roles/create-roles) * [Delete Roles](/docs/manage-users/access-control/configure-core-rbac/roles/delete-roles) * [Remove Roles from Users](/docs/manage-users/access-control/configure-core-rbac/rbac-users/remove-roles-from-users) * [Add Permissions to Roles](/docs/manage-users/access-control/configure-core-rbac/roles/add-permissions-to-roles)