In this chapter, I describe the Identity API features that support roles and claims. Roles are commonly used to create fine-grained authorization policies that differentiate between different signed-in users. Claims are a general-purpose approach to describing any data that is known about a user and allow custom data to be added to the Identity user store. Table
10-1 puts these features in context.
Table 10-1.Putting Roles and Claims in Context
Question | Answer |
|---|
What are they? | Roles differentiate groups of users to create authorization ... |