Managing User Access - Auth0 FGA Docs

In this guide you will learn how to grant a user access to a particular object.

Before you start

In order to understand this guide correctly you must be familiar with some Auth0 FGA Concepts and know how to develop the things that we will list below.

Step by step

01. Adding direct relationship

For our application, we will give user Anne the reader relationship to a particular tweet. To do so we add a tuple as follows:

[
  // Anne can read tweet:1
  {
    "user": "user:anne",
    "relation": "reader",
    "object": "tweet:1"
  }
]

With the above, we have added a direct relationship between Anne and tweet:1. When we call the Check API to see if Anne has a reader relationship, Auth0 FGA will say yes.

02. Removing direct relationship

Now let’s change this so that Anne no longer has a reader relationship to tweet:1 by deleting the tuple: With this, we have removed the direct relationship between Anne and tweet:1. And because our type definition for reader does not include any other relations, a call to the Check API will now return a negative response.