title: ASP.NET / OWIN/ ADAL Azure AD authentication with in app roles defined and assignment
body: <p>I'm developing an app using ASP.NET WebAPI 2.2 that requires login via Azure AD for which I'm using ADAL/OWIN, but the app must have app specific permissions and roles that can be assigned to users who log in to it (a bit like SharePoint groups). The client can't use Azure AD groups, claims or Azure app permissions to assign rights/create groups as it is set up/maintained by a third party. </p>
  
  <p>So, if the app is authenticating users against Azure AD, am I able to use the SQLRoleProvider to create/maintain a permission set and assign them to users within the app? I've searched for a while and not found anything that exactly fits my use scenario. Currently I'm thinking I may have to roll my own role provider.</p>
  
  <p>EDITED for clarity.</p>