Can we add users, sharepoint groups, Office 365 groups & Security groups using ListItemAllFields.AddRoleDefinitionAsync()

[mvcsharepointdev]

I have this code to add a user to a folder permission:-

using (var scope = host.Services.CreateScope()) 
{
    // Ask an IPnPContextFactory from the host
    var pnpContextFactory = scope.ServiceProvider.GetRequiredService<IPnPContextFactory>();

    // Create a PnPContext
    using (var context = await pnpContextFactory.CreateAsync(new Uri(siteUrl)))
    {
        // Get Root Folder
        var rootFolder = (await context.Web.Lists.GetByTitleAsync("Test Library", p => p.RootFolder)).RootFolder;

        // Ensure SubFolder
        var subFolder = await rootFolder.EnsureFolderAsync("TestFolder");

        // Break Inheritance on SubFolder [BreakRoleInheritance(bool copyRoleAssignments, bool clearSubscopes)]
        subFolder.ListItemAllFields.BreakRoleInheritance(false, true);

        // Get current user
        var currentUser = await context.Web.GetCurrentUserAsync();

        // Find role definition
        var roleDefinitions = (await context.Web.GetAsync(p => p.RoleDefinitions)).RoleDefinitions;
        var editRole = roleDefinitions.AsRequested().FirstOrDefault(p => p.Name == "Edit");

        // Add role to selected user
        await subFolder.ListItemAllFields.AddRoleDefinitionAsync(currentUser.Id, editRole);
    }
}

but my question is can we add users, sharepoint groups, Office 365 groups & Security groups using ListItemAllFields.AddRoleDefinitionAsync()? or this is limit to certain types only ? Thanks

[jansenbe]

@mvcsharepointdev : you can add all, you just need to ensure the "user" first. See https://pnp.github.io/pnpcore/using-the-sdk/security-users.html for more details. So for example before you can use an Azure AD group you do

var myGroupToUse = await context.Web.EnsureUserAsync($"c:0t.c|tenant|{groupid}");

Then you use myGroupToUse.Id to actually add the group