How to configure azure ad to allow access to api based on access token

Question

I\'m learning about all things azure and I\'ve setup a client app (angular) and web api (.net core 2.2) and gone through several tutorials and microsoft documents to figure out