Issue with authorization access for Teams group member to Stream video

%3CLINGO-SUB%20id%3D%22lingo-sub-175563%22%20slang%3D%22en-US%22%3EIssue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-175563%22%20slang%3D%22en-US%22%3E%3CP%3EAnyone%20got%20trouble%20like%20my%20Teams%20members%20in%20the%20following%20picture.%20The%20problem%20is%20they%20used%20to%20access%20video%20posted%20on%20MS%20Stream%20until%20last%20week.%20Now%20all%20these%20video%20show%20a%20warning%20that%20they%20can%20not%20access%20anymore.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F30871iC1E5913CB502F302%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%222018-03-25.png%22%20title%3D%222018-03-25.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177645%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177645%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F131485%22%20target%3D%22_blank%22%3E%40David%20Nguy%E1%BB%85n%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F131605%22%20target%3D%22_blank%22%3E%40Jeff%20Ammons%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUpdate%20on%20Fix%3A%3C%2FP%3E%0A%3CP%3EWe%20are%20working%20on%20a%20hot%20fix%20right%20now%20that%20should%20be%20done%20soon.%20It%20will%20take%20a%20few%20days%20to%20fully%20deploy%20that%20hot%20fix%20to%20all%20regions%2C%20but%20you%20should%20have%20this%20working%20again%20soon.%20Sorry%20for%20our%20bug.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20the%20hot%20fix%20we%20ended%20up%20rolling%20back%20to%20part%20of%20the%20previous%20behavior%20to%20address%20this%20issue%20in%20the%20short%20term%20and%20are%20working%20on%20a%20better%20longer%20term%20fix%20that%20still%20accomplishes%20the%20scale%2Fperformance%20improvements%20we%20were%20originally%20targeting.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177013%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177013%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20seems%20like%20your%20issue%20is%20related%20to%20the%20Hidden%20Membership%20issue%20we%20are%20looking%20into%20to%20fixing.%20If%20your%20organization%20uses%20the%20SDS%20service%20to%20create%20Teams%2FGroups%20automatically%20for%20classes%2C%20that%20tool%20always%20sets%20the%20membership%20to%20hidden.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUpdate%20on%20Fix%3A%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIt%20turns%20out%20this%20issue%20seems%20harder%20to%20fix%2Faddress%20than%20we%20thought%20originally%20yesterday.%20The%20issue%20is%20that%20we%20change%20significantly%20how%20we%20sync%20group%20membership%20into%20Stream%20(to%20help%20improve%20scale%2Fperformance%20of%20syncing)%20and%20with%20this%20change%20we%20introduced%20this%20problem.%26nbsp%3BWe%20are%20in%20discussions%20with%20the%20AAD%20team%20inside%20MS%20to%20try%20and%20track%20down%20the%20correct%20way%20for%20us%20to%20fix%20this%20problem.%20It%20will%20likely%20take%20us%20some%20time%20to%20find%20the%20right%20fix%20and%20deploy%20it.%20So%20sorry.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-176716%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-176716%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F114%22%20target%3D%22_blank%22%3E%40Marc%20Mroz%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'm%20not%20familiar%20with%20hidden%20membership.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20my%20case%20I%20created%20groups%20in%20Teams%20and%20added%20Class%20Notebooks.%20Then%20I%20create%20Group%20Channels%20in%20Stream%20for%20each%20group%20(usually%202-4%20channels%20per%20group).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnce%20I%20publish%20a%20lecture%20video%2C%20I%20paste%20the%20link%20into%20OneNote.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20has%20been%20working%20great%20since%20back%20in%20the%20fall.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELast%20week%20I%20got%20my%20first%20report%20of%20a%20student%20who%20couldn't%20view%20a%20video.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI've%20had%20spotty%20success%20removing%20users%20from%20groups%20and%20adding%20them%20back.%20Sometimes%20that%20works%20and%20sometimes%20it%20either%20doesn't%20work%20at%20all%20or%20works%20temporarily.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20some%20cases%20they%20can%20see%20the%20channel%2C%20just%20not%20any%20videos%20in%20it.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI've%20also%20tried%20manually%20adding%20a%20student%20directly%20to%20the%20video%20itself%20and%20sometimes%20that%20works.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20will%20try%20making%20them%20owners%20next.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20do%20have%20a%20support%20ticket%20open%26nbsp%3B%23%3A7707118.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20for%20your%20help!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-176600%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-176600%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F131485%22%20target%3D%22_blank%22%3E%40David%20Nguy%E1%BB%85n%3C%2FA%3E%20and%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F131605%22%20target%3D%22_blank%22%3E%40Jeff%20Ammons%3C%2FA%3E%20-%20Do%20you%20happen%20to%20know%20if%20your%20groups%2Fteams%20use%20%22hidden%20membership%22%3F%20I%20just%20talked%20with%20one%20of%20our%20on%20call%20engineers%20and%20there%20is%20an%20open%20incident%20related%20to%20Stream%20not%20being%20able%20to%20recognize%20the%20correct%20membership%20of%20a%20group%20when%20hidden%20membership%20is%20enabled%20for%20the%20group.%20This%20just%20started%20happening%20since%20our%20last%20deployment.%20We%20are%20actively%20working%20on%20fixing%20this%20issue%20and%20getting%20it%20deployed%20as%20fast%20as%20we%20can%20but%20it%20will%20likely%20take%20a%20few%20days%20or%20so.%20As%20a%20workaround%20if%20a%20member%20is%20upgraded%20to%20be%20an%20owner%20of%20the%20group%20Stream%20works%20correctly.%26nbsp%3B%20So%20sorry%20for%20this%20bug.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-176560%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-176560%22%20slang%3D%22en-US%22%3EOne%20more%20point%20is%20that%20I'm%20the%20owner%20of%20that%20channel%20and%20I%20blocked%20permission%20that%20group%20members%20can%20control%20my%20video.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-176558%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-176558%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F114%22%20target%3D%22_blank%22%3E%40Marc%20Mroz%3C%2FA%3E%20-%20The%20Class%20Notebook%20is%20a%20default%20tab%20when%20we%20create%20a%20team%20as%20class%20in%20MS%20Teams.%20And%20for%20the%20case%20in%20my%20picture%2C%20it%20used%20to%20work%20well%20since%20a%20year%20ago%20(video%20playing%20as%20an%20embed%20directly%20on%20page).%20I%20found%20out%20that%20the%20trouble%20come%20from%20Stream%20access%20control%20since%20the%20video%20is%20posted%20in%20a%20private%20group.%20This%20user%20also%20a%20member%20of%20that%20private%20group%20so%20he%20can%20watch%20the%20video%20until%20last%20week.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-176516%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-176516%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F131485%22%20target%3D%22_blank%22%3E%40David%20Nguy%E1%BB%85n%3C%2FA%3E%20-%20From%20the%20screen%20shot%20it%20looks%20like%20the%20users%20are%20accessing%20stream%20videos%20that%20are%20linked%2Fembedded%20into%20a%20OneNote%2C%20and%20then%20that%20OneNote%20is%20a%20tab%20in%20Teams.%20Does%20it%20work%20if%20the%20users%20open%20up%20the%20OneNote%20directly%20or%20is%20it%20still%20the%20same%3F%26nbsp%3B%20Can%20users%20go%20to%20the%20linked%20video%20directly%20in%20Stream%20does%20that%20work%3F%20The%20message%20says%20they%20don't%20have%20access%2C%20I'm%20wondering%20if%20someone%20changed%20the%20permissions%20on%20the%20video%20itself%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F131605%22%20target%3D%22_blank%22%3E%40Jeff%20Ammons%3C%2FA%3E%20-%20How%20are%20the%20videos%20added%20into%20Teams%20in%20your%20case%3F%20Are%20they%20putting%20the%20videos%20in%20a%20OneNote%20which%20is%20then%20a%20tab%20in%20teams%20like%20the%20above%20example%2C%20or%20are%20they%20using%20the%20Stream%20tab%20direction%20in%20teams%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F64079%22%20target%3D%22_blank%22%3E%40Saili%20Raje%3C%2FA%3E%20-%20Can%20you%20take%20a%20look%20at%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-175679%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-175679%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20having%20the%20same%20issue.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EStarting%20a%20few%20days%20ago%20at%20random%20some%20users%20have%20been%20unable%20to%20see%20videos%20or%20channels%20on%20Stream.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESometimes%20a%20user%20will%20be%20unable%20to%20see%20the%20channel%20at%20all%20and%20sometimes%20just%20a%20specific%20video.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20had%20some%20success%20removing%20the%20user%20from%20the%20group%2C%20then%20re-adding%20them.%20At%20least%20that%20worked%20yesterday%2C%20now%20today%20they've%20lost%20access%20again.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1573076%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1573076%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F114%22%20target%3D%22_blank%22%3E%40Marc%20Mroz%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20issue%20still%20persists.%20It%20worked%20fine%20until%20last%20month%20but%20now%20the%20connection%20seems%20to%20be%20broken%20again%2C%20and%20we%20can't%20access%20Stream%20videos%2C%20as%20well%20as%20Forms%2C%20from%20Class%20Notebook%20inside%20the%20Teams%20desktop%20app.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1618509%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20authorization%20access%20for%20Teams%20group%20member%20to%20Stream%20video%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1618509%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20issue%20is%20happening%20in%20our%20tenant%20as%20well.%26nbsp%3B%20I%20have%20users%20that%20can%20see%20the%20Stream%2FChannel%20just%20fine%2C%20all%20videos%20as%20they%20are%20shared%20with%20everyone%3B%20tenant%20wide.%26nbsp%3B%20When%20I%20place%20the%20channel%20into%20a%20Teams%20tab%2C%20the%20issue%20arrives.%26nbsp%3B%20No%20solution%20that%20I%20can%20find%20and%20no%20reason%20the%20users%20should%20not%20be%20allowed%20to%20see%20the%20content.%26nbsp%3B%20Is%20this%20not%20a%20very%20important%20issue%20to%20consider%20and%20try%20to%20get%20fixed%20asap%3F%26nbsp%3B%20Sure%20doesn't%20seem%20to%20be%20based%20upon%20the%20timeline%20in%20this%20thread.%26nbsp%3B%20Anyone%20call%20into%20premier%20support%20to%20try%20and%20drive%20a%20solution%20out%20and%20if%20so%2C%20can%20you%20provide%20us%20with%20the%20details%20of%20that%20conversation%3F%26nbsp%3B%20Support%20here%20appears%20to%20not%20really%20care%20much%20about%20this%2C%20unfortunately!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Anyone got trouble like my Teams members in the following picture. The problem is they used to access video posted on MS Stream until last week. Now all these video show a warning that they can not access anymore.

2018-03-25.png

10 Replies
Highlighted

We are having the same issue.

 

Starting a few days ago at random some users have been unable to see videos or channels on Stream.

 

Sometimes a user will be unable to see the channel at all and sometimes just a specific video.

 

I have had some success removing the user from the group, then re-adding them. At least that worked yesterday, now today they've lost access again.

Highlighted

@David Nguyễn - From the screen shot it looks like the users are accessing stream videos that are linked/embedded into a OneNote, and then that OneNote is a tab in Teams. Does it work if the users open up the OneNote directly or is it still the same?  Can users go to the linked video directly in Stream does that work? The message says they don't have access, I'm wondering if someone changed the permissions on the video itself?

 

@Jeff Ammons - How are the videos added into Teams in your case? Are they putting the videos in a OneNote which is then a tab in teams like the above example, or are they using the Stream tab direction in teams?

 

@Saili Raje - Can you take a look at this?

Highlighted
@Marc Mroz - The Class Notebook is a default tab when we create a team as class in MS Teams. And for the case in my picture, it used to work well since a year ago (video playing as an embed directly on page). I found out that the trouble come from Stream access control since the video is posted in a private group. This user also a member of that private group so he can watch the video until last week.
Highlighted
One more point is that I'm the owner of that channel and I blocked permission that group members can control my video.
Highlighted

@David Nguyễn and @Jeff Ammons - Do you happen to know if your groups/teams use "hidden membership"? I just talked with one of our on call engineers and there is an open incident related to Stream not being able to recognize the correct membership of a group when hidden membership is enabled for the group. This just started happening since our last deployment. We are actively working on fixing this issue and getting it deployed as fast as we can but it will likely take a few days or so. As a workaround if a member is upgraded to be an owner of the group Stream works correctly.  So sorry for this bug.

Highlighted

Hi, @Marc Mroz.

 

I'm not familiar with hidden membership.

 

In my case I created groups in Teams and added Class Notebooks. Then I create Group Channels in Stream for each group (usually 2-4 channels per group).

 

Once I publish a lecture video, I paste the link into OneNote.

 

This has been working great since back in the fall.

 

Last week I got my first report of a student who couldn't view a video.

 

I've had spotty success removing users from groups and adding them back. Sometimes that works and sometimes it either doesn't work at all or works temporarily.

 

In some cases they can see the channel, just not any videos in it.

 

I've also tried manually adding a student directly to the video itself and sometimes that works.

 

I will try making them owners next.

 

I do have a support ticket open #:7707118.

 

Thanks for your help!

Highlighted

It seems like your issue is related to the Hidden Membership issue we are looking into to fixing. If your organization uses the SDS service to create Teams/Groups automatically for classes, that tool always sets the membership to hidden.

 

Update on Fix: 

It turns out this issue seems harder to fix/address than we thought originally yesterday. The issue is that we change significantly how we sync group membership into Stream (to help improve scale/performance of syncing) and with this change we introduced this problem. We are in discussions with the AAD team inside MS to try and track down the correct way for us to fix this problem. It will likely take us some time to find the right fix and deploy it. So sorry.

Highlighted

@David Nguyễn @Jeff Ammons 

 

Update on Fix:

We are working on a hot fix right now that should be done soon. It will take a few days to fully deploy that hot fix to all regions, but you should have this working again soon. Sorry for our bug.

 

For the hot fix we ended up rolling back to part of the previous behavior to address this issue in the short term and are working on a better longer term fix that still accomplishes the scale/performance improvements we were originally targeting.

Highlighted

@Marc Mroz 
Hi,

 

The issue still persists. It worked fine until last month but now the connection seems to be broken again, and we can't access Stream videos, as well as Forms, from Class Notebook inside the Teams desktop app.

Highlighted

This issue is happening in our tenant as well.  I have users that can see the Stream/Channel just fine, all videos as they are shared with everyone; tenant wide.  When I place the channel into a Teams tab, the issue arrives.  No solution that I can find and no reason the users should not be allowed to see the content.  Is this not a very important issue to consider and try to get fixed asap?  Sure doesn't seem to be based upon the timeline in this thread.  Anyone call into premier support to try and drive a solution out and if so, can you provide us with the details of that conversation?  Support here appears to not really care much about this, unfortunately!