Add script to enable AAD Auth/Authz

[lenisha]

This issue is for a: (mark with an x)

- [ ] bug report -> please search issues before submitting
- [x] feature request
- [ ] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Expected/desired behavior

With the help of AppService Auth enable Authentication and Authorization for specific AAD group in the tenant

[pamelafox]

I've enabled AAD for the other sample:
https://github.com/Microsoft/sample-app-aoai-chatGPT/

I did it via preprovision and postprovision hooks, and some scripts to create the app registration.
Unfortunately, I haven't gotten it working on CI/CD yet, but it does work well locally.
Let me know if you'd like a PR to this repo for those changes.

[wherewith]

I would love a PR to this repo for those changes!

[vrajroutu]

@wherewith also if you could display the user icon in the headers with the logged in user details.

[wherewith]

I think that whatever solution was used on the other sample would be perfect for this repo as a starting point @pamelafox

[salvafuentes]

Yes please, it would be great to have some kind of authentication so not everyone can access the deploy.

[pamelafox]

PR at #534
Please report back if it works for you.

[pamelafox]

We do have documentation now about using AAD but we'd like to automate it with scripts. @mattmsft is going to extend my scripts to work with the document-level access control he just added.

[zhongshuai-cao]

This is fantastic! I was hesitant to deploy the app initially and then manually integrate Azure AD later. Unfortunately, the official documentation didn't provide clear steps on how to achieve this using deployment scripts.

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this issue will be closed.

[mattgotteiner]

Sorry we never closed this - we did eventually do this

https://github.com/Azure-Samples/azure-search-openai-demo/blob/main/docs/login_and_acl.md#setting-up-optional-login-and-document-level-access-control