Auth0 FGA Subscription Plans
Free trial
The Auth0 FGA Free Trial helps you learn FGA authorization models and how to integrate them in your application with Auth0 FGA’s SDKs.
Creating a proof-of-concept application that uses Auth0 FGA can take anywhere from days to months, so the Auth0 FGA free trial is currently not time-limited. We reserve the right to limit the trial period in the future.
This free trial is governed by the free trial terms in Okta's Master Subscription Agreement. It does not have an SLA and support is provided through the Auth0 Community.
The free trial has the limitations detailed below. Rate limits are per store.
| Entity | Limit |
|---|---|
| WriteAuthorizationModel Rate | 10 requests per minute |
| ReadAuthorizationModels Rate | 30 requests per minute |
| Check & BatchCheck Rate* | 20 requests per second |
| Read Rate | 25 requests per second |
| Expand Rate | 30 requests per minute |
| Write Rate | 20 requests per second |
| ReadChanges Rate | 5 requests per second |
| ListObjects Rate | 10 requests per minute |
| ListUsers Rate | 10 requests per minute |
| Types per Model | 80 |
| Number of Tuples per Write Transaction | 40 |
| Total Number of Tuples | 50 thousand |
| Monthly Active Users | 100 |
| Number of Stores | 10 |
| Available Regions | US, Europe and Australia |
- Each check sent in the
checksarray ofBatchCheckapplies to the overallCheckrate limit.
Enterprise subscription
The Auth0 FGA enterprise subscription allows you to use the product in production under Okta's Master Subscription Agreement and Service Levels.
An enterprise contract is required to use Auth0 FGA; Auth0/Okta customers should contact their account executive for further details. If you are not an Auth0/Okta customer, you can contact Auth0/Okta here.
The limits for Auth0 FGA Enterprise are detailed below. Rate limits are per store. Higher limits can be requested by contacting an account executive or account manager, or by contacting us.
| Entity | Limit |
|---|---|
| WriteAuthorizationModel Rate | 10 requests per minute |
| ReadAuthorizationModels Rate | 30 requests per minute |
| Check & BatchCheck Rate* | 500 requests per second |
| Read Rate | 100 requests per second |
| Expand Rate | 30 requests per minute |
| Write Rate | 150 requests per second |
| ReadChanges Rate | 10 requests per second |
| ListObjects Rate | 20 requests per second |
| ListUsers Rate | 5 requests per second |
| Types per model | 80 |
| Number of tuples per write transaction | 40 |
| Total of number of tuples | 10 million, more available to purchase |
| Monthly Active Users | Based on your contract |
| Number of Stores | 20 |
| Available AWS Regions | US, Europe and Australia |
- Each check sent in the
checksarray ofBatchCheckapplies to the overallCheckrate limit.
Private Cloud in AWS
Private Cloud is an add-on for the Auth0 FGA Enterprise subscription, that allows using Auth0 FGA per-customer dedicated infrastructure in several AWS regions.
| Entity | Limit |
|---|---|
| Rate Limits | Based on your contract |
| Types per model | 80 |
| Number of tuples per write transaction | 40 |
| Total of number of tuples | Based on your contract |
| Monthly Active Users | Based on your contract |
| Number of Stores | 20 |
| Available AWS Regions | US, Australia, Germany, Ireland, UK, France, Japan, India, Singapore and Brazil |
Monthly active users calculation
Monthly Active Users are calculated based on the amount of different user field values that are sent to the Check and ListObjects API endpoints for each store over a one month period.
So the below will count as 6 unique users:
Check(user=user:anne, relation=can_view, object=document:1)
Check(user=user:beth, relation=can_view, object=document:1)
ListObjects(user=user:anne, relation=can_view, type=document)
ListObjects(user=user:carl, relation=can_view, type=document)
Check(user=user:*, relation=can_view, object=document:1)
Check(user=group:a#member, relation=can_view, object=document:1)
Check(user=employee:anne, relation=can_view, object=document:1)
Also note that MAU are counted per store, so the below will count as two distinct users:
Check(user=user:anne, relation=can_view, object=document:1) // store 1
Check(user=user:anne, relation=can_view, object=document:1) // store 2
Checking the current subscription level
The subscription level is displayed in the 'Manage Account' section of the Auth0 FGA Dashboard.