'Is it possible get Client tenant user role as claim on app tenant ad token

I have an Auth AD Tenant(Multi-Tenant) and multiple Client AD Tenant(Single-Tenant) App.

Is it possible to get a user role that is set on their own single-tenant client ad app in a claim on token get from Auth AD by sign-in?

If possible what is the configuration? I am using the MSAL library to handle AD on my Angular Application.



Solution 1:[1]

Not sure whether this helps you but you should be able to define an application role in your multi-tenant application registration and map user groups to that role using a role assignment. See: Add app roles to your application and receive them in the token

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 Martin Brandl