Your agency has asked for access to Auth0. You don't need to share your password for it. Auth0 lets you add them with their own login, choose exactly what they can do, and remove them when the project ends. These are the clicks, checked against Auth0's own help pages in November 2026.
Which role to choose
Pick the narrowest role that lets your agency do the work. Admin is usually the right one.
| Role | What it allows | For an agency |
|---|---|---|
| Admin | Reads and changes everything in the tenant's Dashboard, including applications, connections, extensions and tenant members. | Usually the right one |
| Editor - Specific Apps | Changes the settings of specific applications only, and cannot create new ones. Professional plan or higher. | If the work needs it |
| Editor - Users | Creates, blocks and deletes users, resets their passwords and MFA, assigns roles and reads logs. Professional plan or higher. | If the work needs it |
| Viewer - Config Settings | Reads applications, APIs and security settings, without secrets, billing, users or logs. Essentials plan or higher. | If the work needs it |
Add your agency to Auth0
Open Tenant Members If you have more than one tenant, check that your tenant is the one open.
- In the Auth0 Dashboard, open the your tenant tenant and go to Settings, then Tenant Members.
- Click Add Member.
- On the Add New Tenant Member screen, enter your agency's email address and select the Admin role.
- Click Invite.
Only a tenant Admin can add members, and if you sign in to Auth0 with a password, you must verify your email address first. The Free plan allows 3 tenant members, all Admins.
How you both know it worked
Auth0 emails your agency an invitation from auth0user.net. Once they accept it, they show in your Auth0 account's list of people with access, where you can see or change their role at any time.
Remove access when the project ends
- In the Auth0 Dashboard, open the your tenant tenant and go to Settings, then Tenant Members.
- Click ... to the right of your agency's email address, click Remove, then click Save.
- Under Applications, then Applications, delete any Machine to Machine application your agency made for its own tools: open it, find the Danger Zone at the bottom of Settings and select Delete.
Do you have to share your password?
No. Every step above uses Auth0's own invite, so your agency signs in with their own account, your two-step verification stays on, and anything they change is recorded under their name. How to give a developer access without sharing your password covers the other accounts agencies usually ask for.
Doing this for every client?
Agencies can send each client one GetSetKeys link instead of a page like this. It walks the client through Auth0 and the other platforms the project needs, and checks that each step is done.