title: AAD AppRoles allowedMemberTypes for both application and user
body: <p>According to <a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-add-app-roles-in-azure-ad-apps" rel="nofollow noreferrer">Add app roles in your application and receive them in the token</a>, I can create an <code>AppRole</code> for users, applications or both.</p>
  <p>If I want to target users, the property <code>allowedMemberTypes</code> on the <strong>Manifest</strong> should be <code>User</code>. For applications, <code>Application</code>, but what about both?</p>
  <p>What is the <code>allowedMemberTypes</code> for both?</p>