How do I assign app roles to users?

Question

Hi,

How do I assign app roles to users so they have limited access to app functionalities based on the app role they have? I'm switching from Keycloak OIDC to Entra ID but I'm not able to change the "Default access" app role to an app role I defined.

I created an app in Entra ID, added some users and assigned them to the app, added some app roles but I'm unable to change the default access.

I have a Blazor Webassembly PWA and each user must have an app role assigned. Based on the role they can do less or more in the app.

Best regards

Yves

Answer 1

To assign app roles to users in Microsoft Entra ID, follow these steps:

1. Sign in to the Microsoft Entra admin center as a user with the necessary permissions (at least a Cloud Application Administrator).
2. Navigate to the application you want to manage:
   • Go to Entra ID > App registrations and select your application.
3. Assign users to the app:
   • Under Manage, select Users and groups and then click on Add user/group.
   • Choose the users or groups you want to assign to the application.
4. Assign app roles (if you have defined app roles in your application):
   • After selecting users, you can use the Select role option to assign the app role to the selected users and groups.
5. Complete the assignment by clicking Assign.

Regarding the "Default access" app role, it is typically set to allow access to the application. If you want to ensure that each user has a specific app role assigned, make sure that you have defined the roles correctly in the app registration and that you are assigning them as described above.

If you find that you cannot change the default access, ensure that your app roles are properly configured in the app's manifest and that you are following the correct procedures for assignment.

---

References:

• Declare roles for an application
• Add app roles to your application and receive them in the token