How to restrict Azure Static WebApp to team members?

Question

I am building a static webapp for my team but I do not want its availability to be public.

How can I restrict its access to just my teammates, perhaps using Azure Active Directory. I am publishing the website from Azure DevOps with pipelines if that matters.

Answer 1

Hi @Andrew Fogarty ,

You can achieve this using Role management, Every user who accesses a static web app belongs to one or more roles. There are two built-in roles that users can belong to:

• anonymous: All users automatically belong to the anonymous role.
• authenticated: All users who are logged in belong to the authenticated role.

Beyond the built-in roles, you can create new roles, assign them to users via invitations, and reference them in the staticwebapp.config.json file.

follow the steps in this doc to assign roles for your team: Authentication and authorization for Azure Static Web Apps. You can also check out this similar Github thread.

Thanks,

Grace