This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I have an app which uses Azure AD App registration for user and roles management (Access controlled based on Roles assigned). I want to list down all the users who has a certain role in this enterprise application registration. Can anyone help me with the code for Blazor? Thank you!
A free and open-source web framework that enables developers to create web apps using C# and HTML, developed by Microsoft.
A cloud-based identity and access management service for securing user authentication and resource access
An object-oriented and type-safe programming language that has its roots in the C family of languages and includes support for component-oriented programming.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 61%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
A working Blazor code would be nice.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Here is a Blazor example from the official documentation for retrieving the name of the user's first role:
<AuthorizeView>
<Authorized>
<p>@context.User.Claims.FirstOrDefault(c=>c.Type == "role").Value</p>
</Authorized>
</AuthorizeView>
The best way to retrieve the role is to get it from the roles claim in the JWT token (http://schemas.microsoft.com/ws/2008/06/identity/claims/role ).
In your authorization code, it is recommended to check whether a particular claim value is present, rather than assuming the user has just one role claim.
if (context.User.HasClaim(ClaimTypes.Role, "Admin")) { ... }
See related threads:
Let me know if this is close to what you are looking for. We don't have an exact sample for this.
If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions. Otherwise let us know if you have further questions.
Thank you for your reply. However, I think there is a slight misunderstanding regarding my question. Let me elaborate.
I want to to find all the users who has a certain role, not all the roles related to a user.
Ex: I am working on a request system, which a requestor submitting a request, and it would go for various approvals. I am managing these approvals through Roles. so just after the submission, I need to send an email to all the users who has let's say "FirstLevelApprover" role. for that, I need to query all the users who has this particular role assigned to them and send an email.
Hope this is clear now.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi, do you mean you want to get all the users listed here?
let me try to write a sample, and this is the api you need to use for your requirement. Pls note, since the principalType property doesn't support fitler, so we have to manually get all the users. This API would return all members including group and service principal.
But this will only fetch the users with their roles only from a particular application (Enterprise Application) right ? :-)
Hi, it's true, the query parameter is the application object id, so it only fetch the users from a specific application, just like what I asked before, just showing all the users in that page. The API is designed for that. And for User API in Graph API, it's not able to filter the users by app role assignment.
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
2 deleted commentsComments have been turned off. Learn more