Forum Discussion

Johan Lindroos's avatar
Johan Lindroos
Brass Contributor
Jul 11, 2017

Using AAD security groups for controlling permissions to channels / video

Hello,

 

I've been trying to figure out how to use AAD security groups (not O365 enabled groups) for controlling access to videos. Does it support AAD sec groups? 

 

Seems I can set the AAD sec group via People dropdown on a specific video, but I cant seem to be able to the same on a Channel ?

 

  • Tom Draney's avatar
    Tom Draney
    Brass Contributor

    Like others that have responded, it is crucial to my organization that the ability to use Active Directory Security Groups to manage permissions in Stream is implemented ASAP! 

     

    Until this happens, we will continue to use SharePoint Asset/Video Libraries or MS Video.  The problem with the former is that it is not streaming technology and the problem with the latter is that it will be migrated into Stream and who knows the details on what the experience will be.

    • Geoffrey Bronner's avatar
      Geoffrey Bronner
      Steel Contributor
      Definitely still a desired feature. We think some of our use cases can be handled by converting 365 groups to dynamic groups (this seems to work fine in testing with Stream) but fortunately we have all the Azure Active Directory Premium licenses to do that.
  • please please please move this up in priority. The fact that a channel can have only "company wide" videos or "O365 Group" videos is crap. This does not lend itself to enterprise grade solutions.

  • David Shumate's avatar
    David Shumate
    Brass Contributor

    Is there any update on this?  How am I supposed to trim permission to a video without support for AAD security groups that we use for all other assets?

    • Marc Mroz's avatar
      Marc Mroz
      Icon for Microsoft rankMicrosoft

      Today in Stream you can permission an individual video by any combination of users, AD security groups, and O365 "modern" groups. To add an AD Security group on the video upload/edit screen, in the "Permissions" section, switch the search drop down to "People," then you can add a user or an AD security group.

       

      For the O365 Video migration to Stream, we will create a special new type of group called a "Custom Stream group" that is NOT tied to an O365 Group. This allows us to migrate in the O365 Video channels one for one into Stream and move over owner, editor, viewer permissions including AD security group. Your O365 Video channels will become "Custom groups" in Stream.

       

      We are also exploring the ability to allow you to create new "Custom Stream groups" which aren't tied to O365 Groups from Stream itself outside of the migration. When we do this, then there will be a way at a group level to assign AD security groups as owners, editors, viewers of the group. We don't have a timeline yet for when we'll do this work, but hoping to get it in the coming quarters.

      • KeepAtIt365's avatar
        KeepAtIt365
        Copper Contributor

        Marc MrozWhen this rolls out will Stream be able to inherit permissions from SharePoint groups? If not does something like this exist outside of Teams? We are searching for a way to manage a channel with a very large, dynamic permission group.

        (sorry didn't realize this was a zombie thread, will repost)

  • Johan Lindroos - In Stream, channels don't have any permissions. The channels can be one of the following:

    • Company-wide - in this case you can only add videos that have company wide access to these channels and anyone in the company can view/add to these channels
    • Group Channels - in this case the channel is a part of the Group and inherits permissions from the Stream Group.

    In your case, the only thing you can do today is add the security group to the People tab but you can't add it to the channel or Group with that.

    • Johan Lindroos's avatar
      Johan Lindroos
      Brass Contributor

      I really hope for the channel permissions to be supported for other than just O365 groups

      • Geoffrey Bronner's avatar
        Geoffrey Bronner
        Steel Contributor
        We're going to need support for AAD groups or migration from Office 365 Video is going to be a giant mess.

Resources