Azure AD and Applications

I am thinking the brief document should include

1. Type of applications supported by Azure AD

Application Types Description
Single-page application (SPA) A user needs to sign in to a single-page application that is secured by Azure AD.
Web browser to web application A user needs to sign in to a web application that is secured by Azure AD.
Native application to web API A native application that runs on a phone, tablet, or PC needs to authenticate a user to get resources from a web API that is secured by Azure AD.
Web application to web API A web application needs to get resources from a web API secured by Azure AD.
Daemon or server application to web API A daemon application or a server application with no web user interface needs to get resources from a web API secured by Azure AD.

2. Scenarios / Situations when one should consider a specific type of application

3. Best Practices for that type of Application

4. Information detailing clear segregation of roles with respect to tasks-operation could be performed by Application Developers and Azure AD Admins