Azure AD, user inherit roles from group

Question

I'm working in a application we are using roles for feature authorization and groups of users to manage access level.
E.g.:

Roles:
ROLE_Post_Data
ROLE_Read_Data
ROLE_Delete_Data

Groups:
Reader <- ROLE_Read_Data
Writer <- ROLE_Read_Data and ROLE_Post_Data
Admin <- ROLE_Read_Data, ROLE_Post_Data and ROLE_Delete_Data

My user in on Admin group.
Looking into my code (Spring Boot) I can see only the "Admin" group on my roles list from token attributes.
Is it possible to make an user inherit the roles from a group he belongs?

Answer 1

To assign roles to groups, you must create a new security or Microsoft 365 group with the isAssignableToRole property set to true. In the Azure portal, you set the Azure AD roles can be assigned to the group option to Yes.

https://learn.microsoft.com/en-us/azure/active-directory/roles/groups-concept

You can also assign app roles to a security group and the user members of the group will inherit the app roles. You need Azure AD Premium to use this feature. https://learn.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles