title: ASP .NET 5 MVC 6 Identity 3 Roles Claims Groups
body: <p>I'm currently looking for a solution to use an advanced Roles/Group Permission management in ASP .NET 5 MVC 6 with Identity 3. I started a new Preview Starter Web Project with a integrated easy login system.</p>
  
  <p>Now I need a complex "users permission management" with following functions:</p>
  
  <ol>
  <li>users can be in multiple groups/roles</li>
  <li>a group/role have many access objects (e.g. CanAccessUser, CanEditUser...)</li>
  <li>these access objects (maybe claims?) of each group/roles complement each other </li>
  <li>(optional for the ultimate solution): additionally => access objects(maybe claims) can be assigned independently by a group to a user</li>
  </ol>
  
  <p>I have seen that identity already broadly provides a fitting for me table structure . (e.g. AspNetUsers, AspNetUserRoles, AspNetRoles, AspNetRoleClaims),</p>
  
  <p>But I'm missing a good example / documentation to use them. </p>
  
  <p>For MVC 5, I used this example: Users have many groups, a group can have many roles (Roles are the Access Objects in source code for classes / functions)
  <a href="http://typecastexception.com/post/2014/08/10/ASPNET-Identity-20-Implementing-Group-Based-Permissions-Management.aspx">ASP.NET Identity 2.0: Implementing Group-Based Permissions Management</a></p>
  
  <p>Exists for these requirements already a working example that you do not have to reinvent the wheel.</p>