How to protect Azure Function Endpoints with custom roles and permission?

Question

I need a starting point to solve the following problem:

Assume there is a model with different entities (e.g. school classes) and different roles that are connected t