Describes Auth0’s tenant entity limit policy for subscribers.
Entities in Auth0 are tenant configuration elements such as Applications, Connections, Organizations, API , Permissions, Roles, Actions.
Entity limits are hard limits on entities that are enforced for the health of our platform; they are not a component of pricing, though they can differ for groups of pricing plans. Individual pricing plans have separate limitations, which refer to the entitlements like MAU and Enterprise Connections you receive when you subscribe to a given plan. (To learn what your pricing plan limitations are, see Auth0 Pricing.)
Any use of the term “unlimited” means that there are no hard limits, but the threshold is subject to system limitations set by Okta. Please reach out to support if you have any questions on these limits.
M2M Client Grants per Organization (Private Cloud)
1000
Custom Token Exchange Profiles
100
Customers on Enterprise plans can request increased entity limits for Organizations per tenant and Organization members per Organization by contacting support.These limits can be increased to 2,000,000 Organizations per tenant and 2,000,000 Organization members per Organization on public cloud. On private cloud instances, these entities are unlimited.
Authorization Core Role-Based Access Control (RBAC)
Entity
Limit
Roles per Tenant
1000
Scopes per API (Resource Servers)
1000
Roles per User
50
Permissions per User
1000
Permissions per Role
1000
Note that limitations on Permissions per user affect those assigned directly.Technically, a user could have more Permissions than noted if the Permissions
were assigned to different Roles and then the Roles were assigned to the User.
Entity
Limit
Refresh Token per User per Application
200
If the limit is reached and a new Refresh Token is
created, the system revokes or deletes the oldest token for that user in the
Application.Revoked tokens and expired tokens do not count against the limit.
Actions and Actions Modules limits include both deployed and undeployed entities. When deleted, they no longer count toward the specific limit.Actions Versions limits include both draft and active. Once the limit is reached, every additional version that is added will result in the oldest version being deleted.
