Azure-Samples / active-directory-aspnetcore-webapp-openidconnect-v2

An ASP.NET Core Web App which lets sign-in users (including in your org, many orgs, orgs + personal accounts, sovereign clouds) and call Web APIs (including Microsoft Graph)
MIT License
1.37k stars 983 forks source link

[Documentation] Please clarify permissions needed to add an assign app roles #777

Open chitturs opened 1 month ago

chitturs commented 1 month ago

Documentation related to component

Please check all that apply

Description of the issue

The documentation for app role addition and assigning users and groups to the app role says that you need to sign in a "Cloud Application Administrator". This is misleading since the application owner has permissions to do this. Please explicitly clarify that application owner can add app roles (using app registration in portal or powershell) and assign users and groups to those roles (using enterprise applications in portal or powershell).