How to get app role claims (Roles) in access token to protected API when using Javascript client app with MSAL.js

Question

I have two applications. One client app and protected api. I want to pass app roles as claim to protected api on behalf of signed in user from client app. I have added app roles (admin_user_access,normal_user_access) to both client app and api. Also assigned users for those app roles through Enterprise applications section. Also enabled User assignment required? option for both applications. Now when I get token from azure AD I cannot get roles in claim. I able to get scope only that I expose in api. Kindly help me to resolve the issue. Thanks in advance.

Answer 1

I manage to fix the issue. Need to use tenant id in authority instead of common. The actual solution is posted here. Thank you.

Guest user's role not visible in Azure Active Directory auth token claims