Manage Auth0 users and roles via the Management API

Verified steps

1. Create a Machine-to-Machine application in your Auth0 tenant and authorize it to call the Management API with the specific scopes needed (e.g., read:users, update:users, read:roles, create:role_members)
2. Obtain a Management API access token by posting to your tenant's /oauth/token endpoint with grant_type=client_credentials, your app's client_id, client_secret (YOUR_SECRET), and the Management API audience
3. Search and retrieve users with GET /api/v2/users using the q query parameter (Lucene syntax) or GET /api/v2/users/USER_ID for a specific user; use the fields parameter to limit response size
4. Create or update roles with POST /api/v2/roles or PATCH /api/v2/roles/ROLE_ID; assign users to a role with POST /api/v2/roles/ROLE_ID/users providing a JSON body with a users array of user IDs
5. Block a user by patching their profile with blocked: true via PATCH /api/v2/users/USER_ID; delete a user permanently with DELETE /api/v2/users/USER_ID
6. Paginate list responses using the page and per_page query parameters or the checkpoint pagination parameters (from and take) for large user bases; Management API endpoints are rate-limited per tenant