Skip to main content

Documentation Index

Fetch the complete documentation index at: https://auth0-fix-docs-5525.mintlify.app/llms.txt

Use this file to discover all available pages before exploring further.

A Tenant ACL rule is composed of the following elements:
  • Signal: The signal is an identifying piece of information that is provided by the incoming request, such as IP address, geolocation, or user agent.
  • Condition: The condition is the combination of an operator (such as match) and a set of values (such as a list of IP addresses).
  • Action: The action is the directive that your rule executes if criteria are met, such as allow, block, or redirect.
  • Scope: The scope indicates which sets of endpoints that the rule is enforced for, including the Authentication API, Management API, or your entire tenant.
  • Priority: The priority defines the order in which the rule runs relative to other rules.
For detailed information about these Tenant ACL rule properties and how to use them, read the Management API Endpoint Parameter Reference.
The Tenant ACL uses a consistent rule evaluation logic to determine what action, if any, to apply to a given request.Carefully assign priorities to create granular access control policies for your use case.

Create and delete rules

You can create and delete Tenant ACL rules using the following Management API endpoints. You need a Management API access token with indicated scopes.
ActionEndpointRequired scope
Create a ruleCreate access control listcreate:network_acls
Delete a ruleDelete access control listdelete:network_acls

Modify rules

You can modify Tenant ACL rules using the following Management API endpoints. You need a Management API access token with indicated scopes.
ActionEndpointRequired scope
Update a rulePartial update for an access control listupdate:network_acls
Overwrite a ruleUpdate access control listupdate:network_acls

Enable or disable rules

You can enable or disable a rule with the Management API Update access control list endpoint.Set the active property of the rule object to true or false, respectively.

View rules

You can view existing Tenant ACL rules using the following Management API endpoints. You need a Management API access token with indicated scopes.
ActionEndpointRequired scope
View a ruleGet a specific access control list entry for a tenantread:network_acls
View all rulesGet all access control list entries for a tenantread:network_acls

Learn more