API capability pack for bounded Auth0 Management API v2 operations. Enroll an auth0 API connection with base_url set to the tenant Management API root, for example https://example.auth0.com/api/v2, and authenticate with a Management API bearer token scoped to the installed operations. The pack reads users, user roles, user permissions, user organizations, tenants roles, clients, organizations, organization members, and logs for access governance, account triage, and identity incident review. It bundles a scheduled access hygiene digest, an AI-assisted user access brief, and approval-gated workflows for blocking/unblocking one user and assigning/removing roles for one user. The pack intentionally excludes user creation, deletion, password changes, MFA/enrollment/recovery flows, refresh-token/session revocation, connection/client/organization/role creation or deletion, resource-server and tenant mutation, domain/email-template/branding/actions/rules/jobs/key/secret administration, log export, Guardian/attack-protection mutation, and arbitrary API passthrough.