Forum Discussion
Johan Lindroos
Jul 11, 2017Brass Contributor
Using AAD security groups for controlling permissions to channels / video
Hello, I've been trying to figure out how to use AAD security groups (not O365 enabled groups) for controlling access to videos. Does it support AAD sec groups? Seems I can set the AAD sec g...
David Shumate
Dec 12, 2017Brass Contributor
Is there any update on this? How am I supposed to trim permission to a video without support for AAD security groups that we use for all other assets?
Marc Mroz
Microsoft
Dec 14, 2017Today in Stream you can permission an individual video by any combination of users, AD security groups, and O365 "modern" groups. To add an AD Security group on the video upload/edit screen, in the "Permissions" section, switch the search drop down to "People," then you can add a user or an AD security group.
For the O365 Video migration to Stream, we will create a special new type of group called a "Custom Stream group" that is NOT tied to an O365 Group. This allows us to migrate in the O365 Video channels one for one into Stream and move over owner, editor, viewer permissions including AD security group. Your O365 Video channels will become "Custom groups" in Stream.
We are also exploring the ability to allow you to create new "Custom Stream groups" which aren't tied to O365 Groups from Stream itself outside of the migration. When we do this, then there will be a way at a group level to assign AD security groups as owners, editors, viewers of the group. We don't have a timeline yet for when we'll do this work, but hoping to get it in the coming quarters.
- KeepAtIt365Feb 20, 2020Copper Contributor
Marc MrozWhen this rolls out will Stream be able to inherit permissions from SharePoint groups? If not does something like this exist outside of Teams? We are searching for a way to manage a channel with a very large, dynamic permission group.
(sorry didn't realize this was a zombie thread, will repost)
- Scott WheelerOct 17, 2018Brass Contributor
Is there any update to adding Custom Stream groups? Just starting to investigate migrating away from another video provider. We already have all the security groups we need in AD, no sense in recreating them as O365 groups to confuse the issue.
Thanks!
- Marc MrozOct 24, 2018
Microsoft
I answered on the other post as well. But answering a slightly different question here. O365 Groups team had on their roadmap at Ignite that they are investigating "Group based O365 group permissions" which would include support for adding an AD security group to an O365 Group. If/when O365 groups infra team supports this we'd be able to take advantage of it in Stream.
But we are still looking into what the right option is around "Stream only groups", but that project got delayed, but is still high on our list to come up with a solution to those pain points you mention above.
FYI: Mike McLean (OFFICE)
- Maciej KarpinskiOct 30, 2018Brass Contributor
I really hope this will be solved soon one way or the other.
We have a couple of customers that want to use Stream to upload videos for their Intranet and be able to create a company wide channel that everyone at the company can see but only the Intranet editors should be able to add/delete videos from the channel.
- Samuel StevensonJun 21, 2018Copper Contributor
Still waiting on this fix. It's baffling that security groups aren't simply the global solution for managing group permissions.
- Stefaan De VreeseSep 03, 2018Brass ContributorI support this request 200%. We need to be able to set security on the channels using AD Security Groups, this should be basic functionality...