Document how to use custom scopes per endpoint

[arribatec-cloud-1]

My app has many features and I want granular control of which features (endpoints) are available to which users.

I can currently sign on with my azure account, but how do I actually provide granular authorization?

I am able to go into Azure portal and register roles on my user but I don't know how to look at those roles in my app to provide granular access. What is the best way to do this? This should be documented.