Hello everyone,
We're researching into using FusionAuth as a replacement for Auth0 and, after reading the documentation, couldn't decide because there's no definitive scenario that describes our requirements.

We plan on using FusionAuth to provide services via our mobile apps, that will be connecting to our APIs, and for those we will be setting up Applications and Entities. The question is - if the API is an Entity, and mobile app is an application, how roles will be designated to users for the APIs? How do we access them there? Is it done via same approach as in Auth0?

Also there is a question about using Roles by tenants - as we plan to create those roles, while Tenants will be assigning them to their users, is that actually possible?