So I'd like to use Windows Authentication with a new ASP.NET MVC project, but I will probably need roles based authentication functionality so that users of the app can be designated different roles by the application (e.g. Administrator, Approver, General User).
Is there any roles-based authentication functionality built in to Windows Authentication in ASP.NET or do you just have to just manually build this in yourself?
edit: the roles would be at application level- I can't make a business case to create 5 separate Active Directory groups, for example, for this application just to manage roles. Is there some way to manage roles locally within the application? I can build this out, but was wondering if Windows Authentication has this built in or not. Thanks.