Authorize users with Azure Active Directory in ASP.NET Core
In the previous article we discussed how to integrate Azure AD authentication in an ASP.NET Core web application. Continuing from where we left, this article shows how to authorize users based on their AD groups. First of all you need to create required groups in Azure AD and then assign one or more groups to a user account. So, open the Azure AD that you used last time and locate the Groups options as shown below.
http://www.binaryintellect.net/articles/266b9468-117b-4743-a4e7-22e69a7b12b3.aspx