> ## Documentation Index
> Fetch the complete documentation index at: https://auth0.generaltranslation.app/llms.txt
> Use this file to discover all available pages before exploring further.

> Contains Tenant Access Control List reference materials, such as signals, conditions, actions, and scopes.

# Reference

Tenant Access Control List (ACL) supports advanced customization through configuration of various settings. Refer to the sections below to learn more about available options.

## Signals

<ParamField path="asns" type="string[]">
  List of Autonomous System Numbers (ASNs)
</ParamField>

<ParamField path="ipv4_cidrs" type="string[]">
  List of IPv4 addresses or CIDR ranges.
</ParamField>

<ParamField path="ipv6_cidrs" type="string[]">
  List of IPv6 addresses or CIDR ranges.
</ParamField>

<ParamField path="geo_country_codes" type="string[]">
  List of ISO 3166-1 alpha-2 country code.
</ParamField>

<ParamField path="geo_subdivision_codes" type="string[]">
  List of ISO 3166-2 subdivision code.
</ParamField>

<ParamField path="ja3_fingerprints" type="string[]">
  List of JA3 TLS Fingerprints.
</ParamField>

<ParamField path="ja4_fingerprints" type="string[]">
  List of JA4 TLS Fingerprints.
</ParamField>

<ParamField path="user_agents" type="string[]">
  List of client device or browser.
</ParamField>

## Conditions

<ParamField path="match" type="object">
  Returns successful if the provided signal and any of the provided values are equivalent.
</ParamField>

<ParamField path="not_match" type="object">
  Returns successful if the provided signal and none of the provided values are equivalent.
</ParamField>

## Actions

<ParamField path="allow" type="boolean">
  Allows traffic to pass through unaffected.
</ParamField>

<ParamField path="block" type="boolean">
  Blocks traffic from accessing specified scopes.
</ParamField>

<ParamField path="redirect" type="boolean">
  Redirects traffic to a provided location.
</ParamField>

<ParamField path="redirect_uri" type="string">
  URI to redirect traffic to.
</ParamField>

<ParamField path="log" type="boolean">
  Monitoring mode. No action is taken, but results are included in the Tenant ACL log event.
</ParamField>

## Scopes

<ParamField path="tenant">
  Enforces Tenant ACL for both `management` and `authentication` scopes.
</ParamField>

<ParamField path="management">
  Enforces Tenant ACL for requests sent to `{yourDomain}/api/v2/\*}` and `{yourDomain}/scim/\*}`.
</ParamField>

<ParamField path="dcr">
  Controls access to Dynamic Client Registration endpoint `/oidc/register`.
</ParamField>

<ParamField path="authentication">
  Enforces Tenant ACL for requests sent to anywhere not covered in `management` scope.
</ParamField>