Revoke access or refresh groups and roles from Azure AD in .NET Core Web App

Question

I have a file>new .net core web app which is using Azure AD for authentication which works fine out of the box.

I have a requirement to create some auth policies so I