Why should you care?

Admin and account pages must be private. Identity and authorization are required on production apps.

See it live — copy this example

Create an MVC project (dotnet new mvc), add the code, and run dotnet run.

[Authorize(Roles = "Admin")]
public IActionResult AdminDashboard()
{
    return View();
}

Run Example »

Edit the code and click Run — like W3Schools Try it Yourself.

What happened?

• Study the example line by line.
• Each part connects to Policy Authorization.
• Edit one line, save, and run dotnet run to see what changes.

Try it yourself

1. Register a test user.
2. Log in and access a protected page.
3. Log out and confirm redirect to login.
4. Change text or labels in the example and run again — watch the browser update.
5. Break the code on purpose (remove a semicolon), read the error message, then fix it.

Remember

You learned what Policy Authorization is and when to use it. Practice by changing the example yourself. Explain it in your own words before moving on.