Azure Active Directory samples?

Are there any samples out there using Active Directory for blob storage? My use case is a _private_ storage container accessible by web app (already authenticated against AD) to use role-base auth e.g. Jimmy has read, Sally has write, etc. Is OAuth absolutely required for this type of implementation per https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad?

The portal is perfect for setting up these roles/permissions, but I haven't found any examples of how to do this type of auth without OAuth.