[BinaryArcher]

As with Keycloak, Auth0 can implement access tokens via a client and some code.

However, that would assume you use a custom policy within your token for access control, as Auth0 does not provide the same level of RBAC for clients as it does to users.