title: Authorize a user for azure blob access
body: <p>I am authenticating the users to my web page using the <strong>microsoft login</strong> via <strong>adal-node</strong> library.</p>
  
  <p><strong><em>adal-node</em></strong> has an <strong><code>AuthenticationContext</code></strong> from which we can get a <strong><em>JWT token</em></strong> using <strong><code>acquireTokenWithAuthorizationCode</code></strong>.</p>
  
  <p>So, the users of my active directory app can now successfully login with their Microsoft accounts.</p>
  
  <p>Now, the question is how to get their RBAC roles for a specific <em>storageaccount/container/blob</em> using the above received <strong><em>JWT Token</em></strong>? Is that even possible?</p>
  
  <p>Or should I be using a library like <strong><em>azure-arm-authorization</em></strong> for this purpose? I have set the RBAC roles for each <em>storageaccount/container/blob</em> but I am not finding any online documentation on how to get these roles for every logged in user of my app.</p>
  
  <p>Any help would be invaluable. </p>
  
  <p><strong>TL;DR</strong> How do I authorize azure blobs?</p>