Dynamic Role-Based Authorization in ASP.NET Core 2.0

You already know how role-based authorization works in ASP.NET Core but what if you don't want hardcode roles in authorization attribute or create roles later and specify in which controller and action it has access without touching source code?