0

i am trying to save the role from the AuthorizeAttribute in a variable but i cant seem to figure out how. i want something like this. Note: the User/Roles is created from Azure Active Directory

private string CalculateRole()
{
   var role = authorize.role; 
   return role;
}

i searched all over and "closest" i got is this question asp.net identity get all roles of logged in user

but all i get back is a list of Claims I cant find any "roles".

TheNillesen
  • 3
  • 3
  • A "role" is just syntactic sugar for a particular type of claim. The answer you linked in your question is correct. – crgolden Dec 14 '20 at 13:51
  • thank you, i figured it out, didnt understand that the roles where a type of claim -_- but thanks! – TheNillesen Dec 16 '20 at 07:29

3 Answers3

0

[Authorize(Roles = "RoleName")] is used for access. We can specify the roles that have access to the requested resource using the Roles property of Authorize attribute. For example, [Authorize(Roles = "Admin")] allows us to access the action method to users who are member of "Admin" role.

For the currently signed in user for an application, you can always find the Application Roles assigned to them from the Role claims available as part of the access token from Azure Active Directory.

enter image description here

For more information, here's a sample that uses OpenID Connect to sign-in users and use Azure AD Application Roles (app roles) for authorization. Also, you could use Microsoft Graph API to get the roles.

unknown
  • 6,778
  • 1
  • 5
  • 14
0

You can get roles from db by current user id.

Yeskendir Toleubekov
  • 166
  • 1
  • 9
0

You can have a bool validation within the Controller (where HttpContext.User e

bool isAdminUser = User.IsInRole("Admin");

This is fine if you want to validate for specific -or a few- Roles defined. If you have many roles this may not be the best option and you might want to consider to call GraphApi instead for membership validation.

Neophyte
  • 132
  • 1
  • 8