Users are invited and assigned roles per instance. Access is stored as a map of instance identifiers to Auth0 role IDs. Use "*" for every instance.
Removing a user from this API revokes access to the current Makaira customer. That is the product equivalent of deletion.
Human users authenticate with a Bearer JWT. These endpoints also accept HMAC with an API key that includes user:read / user:write (or usermanagement.read / usermanagement.write).
Related: User Management, Role Manager.