Azure AD身份验证并将角色分配给应用程序用户 [英] Azure AD authentication and assigning roles to application users

问题描述

我正在使用.net核心MVC Web应用程序，该应用程序使用启用了多租户的Azure AD身份验证.现在，我想向用户添加自定义应用程序角色.为此，我在azure WebApp的清单文件中添加了一些"appRoles" :. 但是，现在如何将这些应用程序角色分配给我的用户? 我正在使用portal.azure.com，但找不到任何可以实际将这些角色分配给我的应用程序用户的屏幕.您能否让我知道我在哪里可以从azure门户网站上执行此操作?或者我是否需要我的广告团队的其他权限?如果需要的话，有什么具体权限?

I am working on a .net core MVC Web application that is making use of Azure AD authentication with multi tenants enabled.Now I want to add custom application roles to my users. For that I added some "appRoles": to my azure WebApp's manifest file. But now how do I assign these application roles to my users ? I am using portal.azure.com, and I could not find any screens where I can actually assign these roles to my application users. Could you please let me know me where I can do this from the azure portal?or do I need any additional permissions from my AD team?if so what specific permissions ?

推荐答案

您可以将具有角色的用户分配给Enterprise applications刀片中的应用程序:

You could assign users with roles to application in Enterprise applications blade:

1. 单击Enterprise applications刀片，单击All applications查找具有应用程序ID或显示名称的应用程序:

1. Click Enterprise applications blade , click All applications to find your application with app id or display name :

单击该应用程序，单击Users and groups，您将获得当前分配的用户以及已分配的角色:

Click that application , click Users and groups , you will get current assigned users and which role has been assigned :

您可以单击添加用户，然后单击Select Role，可以选择在清单文件中设置的角色并分配给特定用户:

You could click add user and Select Role , you could select the roles you set in manifest file and assign to specific user :

这篇关于Azure AD身份验证并将角色分配给应用程序用户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！