title: How to add/manage user claims at runtime in IdentityServer4
body: <p>I am trying to use IdentityServer4 in a new project. I have seen in the PluralSight video 'Understanding ASP.NET Core Security' that IdentityServer4 can be used with claims based security to secure a web API.  I have setup my IdentityServer4 as a separate project/solution.</p>
  
  <p>I have also seen that you can add an IProfileService to add custom claims to the token which is returned by IdentityServer4.</p>
  
  <p>One plan is to add new claims to users to grant them access to different parts of the api. However I can't figure out how to manage the claims of the users on the IdentityServer from the api project. I assume I should be making calls to IdentotyServer4 to add and remove a users claims?</p>
  
  <p>Additionally is this a good approach in general, as I'm not sure allowing clients to add claims to the IdentityServer for their own internal security purposes makes sense - and could cause conflicts (eg multiple clients using the 'role' claim with value 'admin'). Perhaps I should be handling the security locally inside the api project and then just using the 'sub' claim to look them up?</p>
  
  <p>Does anyone have a good approach for this?</p>
  
  <p>Thanks</p>