title: Creating custom user roles in ASP.NET MVC and Azure AD
body: <p>I am working on an ASP.NET MVC application that uses Azure AD auth out-of-the-box. </p>
  
  <p>What I want to do is define custom roles for certain users. For example, mark <code>JohnDoe@contoso</code> as a <code>"Portal Admin"</code> or <code>SarahJones@contoso</code> as a <code>"Site Manager"</code> - I want to do that without messing with AD roles, since I don't have full access to the AD internals.</p>
  
  <p>I am fine deploying a custom DB to contain the roles. Is there a generic solution for this or do I have to implement my custom verification layer?</p>
  
  <hr>
  
  <p><strong>Update 1:</strong> I can deploy a <a href="http://kitsula.com/Article/Custom-Role-Provider-for-MVC" rel="nofollow">custom role provider</a> and connect it to a different DB, but am wondering if there is a more straightforward way to do this.</p>