Application Roles

The Web App supports authentication to give authenticated users elevated rights for administration or other targeted content. For authentication to happen the application need to be registered in Azure AD. For general reference of app registration and the application manifest see https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest and for adding app-roles see https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-add-app-roles-in-azure-ad-apps.

The authorization schema of the application is quit simple. The following roles are used:

• Anonymous: Access public content of the web site.
• User: Get access to some internal stuff of the site.
• Admin: Create content like tracks, photolists etc.

Create these roles as described above and assign groups/users to these application roles.