Hands-On Full-Stack Web Development with ASP.NET Core

Authorizing users by their role

Many times, users of your application will be assigned roles to define their allowed behavior in the application. For example, your application administrators will likely see areas of the application that other users won't be allowed to see, and will be able to perform administrative tasks such as adding categories. 

To add authorization that is based on roles, we don't need to change the claims infrastructure that we have used so far. Instead, we will use the standard role claim and add it for each role a user possesses.

ASP.NET Core provides the RoleManager<TRole> class that resides in the Microsoft.AspNetCore.Identity namespace. RoleManager provides an API for managing the roles that exist in your application ...