Remove User Auth0 Roles

Role ids to add to (or remove from) a user via the Management API.

organization_id selects the grant scope: when omitted (or blank) the roles are granted tenant-wide (user-level); when set, the roles are granted to the user as a member of that organization.

Auth0 roles for a single user across the user and organization scopes.

assigned lists every current grant — tenant-wide (user-level) grants plus the roles granted to the user within each organization they belong to, each annotated with its scope. catalog is the full tenant role catalog the UI offers in the "add role" picker, and organizations are the orgs the user is a member of (the scopes at which roles can additionally be granted). The UI computes which catalog roles are still assignable per scope from assigned.