06-27-2017 03:20 PM
06-27-2017 03:20 PM
I have been looking at Stream over the past few days and I have a question related to channel permissions and how they will migrate over to Stream.
Our current O365 Video offering relies on channels with 1 or more owners who manage the permissions on the channel (Owners, Editors,Viewers). Owners use AD groups or just individual O365 accounts to manage permissions.
From what I am seeing in Stream, a Channel can only use Office 365 Groups (Stream groups) to set permissions on the channel. We are in the process of planning for O365 Groups, but at this time we do not have many groups and it is highly unlikely that we will give users the ability to create O365 groups.
It seems that Stream has made an architectural decision based on the fact that everyone is fully implementing Office 365 Groups. Did I miss something?
Hoping @Marc Mroz is still monitoring this community.
06-27-2017 03:33 PM
Hey @Tim Crean!
We did take a architectural bet on O365 Groups. Since so many O365 services are doing this same thing, we needed to do something similiar so that we can easily do deeper integrations with them in the future (Teams, Yammer, SP, Outlook, StaffHub, etc) and have the same base set of permissions enforced.
This does mean that you are constrined to Owners/Members in a Group and can't nest securty groups.
However for migrating the channels from O365 Video to Stream, we are not going to be automatically making new O365 Groups for them. We'll have a "special" group type in Stream that will port over the owners/editors/viewers and all permissions (including security groups) from the O365 Video channel. This will allow us to have a 1 to 1 mapping of O365 Video channels to a group entity in Stream with exact permissions.
For Stream GA we decided to stick with just exposing the owners/member on the O365 Group in Stream to not make things complicated.
But when we do the migration we'll have a Stream group that is NOT connected to an o365 group. In the back of my mind I have a feeling that when we do this we might also need/want to allow creation of groups in Stream in this same way.
We haven't set this as the plan yet, but would love your and other customer's feedback after they've played with Stream to see if this is needed or not. I think we need you all to use Stream groups that are connected to O365 Groups for a while to see how it feels. If after using it for a while you feel you need a Stream group that's not connected to groups we can think about doing that, as technically under the covers we'll have the ability to do so.
06-27-2017 05:02 PM
07-03-2017 08:05 AM
07-10-2017 11:23 AM
That porting will be helpful but for sure the lack of support for Active Directory security groups will be a pain point for us. Especially for Viewing permissions when it is set to something less than "everyone" and more than "small group." e.g. "everyone in R&D business unit" - we don't have O365 Groups for those things and I suspect most orgs don't.
07-11-2017 11:05 AM
Thank you so much for the feedback everyone. We will definitely factor this into the thinking. Two things we will have for sure are
The feedback on this thread seems to indicate that we should allow creating these "Special" Stream groups for non migration scenarios too.