https://devscopeninjas.azurewebsites.net/2019/03/15/asp-net-core-2-2-authorization/
ASP.NET Core 2.2 Authorizations using Policy with Requirement based on AD groups