Connect an existing classic paid Azure Video Indexer account to ARM-based account

Note

Azure Video Indexer Azure Resource Manager (ARM) based accounts are now generally available. Learn how to create a new account, connect your classic account, or explore the new ARM REST API.

This article shows how to connect an existing classic paid Azure Video Indexer account to an Azure Resource Manager (ARM)-based (recommended) account. To create a new ARM-based account, see create a new account. To understand the Azure Video Indexer account types, review account types.

In this article, we demonstrate options of connecting your existing Azure Video Indexer account to an ARM-based account.

Prerequisites

  1. Unlimited paid Azure Video Indexer account (classic account).

    1. To perform the connect to the ARM (Azure Resource Manager) action, you should have owner's permissions on the Azure Video Indexer classic account.
  2. Azure Subscription with Owner permissions or Contributor with Administrator Role assignment.

    1. Same level of permission for the Azure Media Service associated with the existing Azure Video Indexer Classic account.
  3. User assigned managed identity (can be created along the flow).

Transition state

Connecting a classic account to be ARM-based triggers a 30 days of a transition state. In the transition state, an existing account can be accessed by generating an access token using both:

The transition state moves all account management functionality to be managed by ARM and will be handled by Azure RBAC.

The invite users feature in the Azure Video Indexer portal gets disabled. The invited users on this account lose their access to the Azure Video Indexer account Media in the portal.
However, this can be resolved by assigning the right role-assignment to these users through Azure RBAC, see How to assign RBAC.

Only the account owner, who performed the connect action, is automatically assigned as the owner on the connected account. When Azure policies are enforced, they override the settings on the account.

If users are not added through Azure RBAC to the account after 30 days, they will lose access through API as well as Azure Video Indexer portal.
After the transition state ends, users will only be able to generate a valid access token through ARM, making Azure RBAC the exclusive way to manage role-based access control on the account.

Note

If there are invited users you wish to remove access from, do it before connecting the account to ARM.

Before the end of the 30 days of transition state, you can remove access from users through the Azure Video Indexer portal on the account settings page.

Get started

Browse to the Azure Video Indexer website

  1. Sign in using your Azure AD account.

  2. On the top right bar press User account to open the side pane account list.

  3. Select the Azure Video Indexer classic account you wish to connect to ARM (classic accounts will be tagged with a classic tag).

  4. Click Settings.

    Screenshot that shows the Azure Video Indexer portal settings.

  5. Click Connect to an ARM-based account.

    Screenshot that shows the connect to an ARM-based account dialog.

  6. Sign to Azure portal.

  7. The Azure Video Indexer create blade will open.

  8. In the Create Azure Video Indexer account section enter required values.

    If you followed the steps the fields should be auto-populated, make sure to validate the eligible values.

    Screenshot that shows the create Azure Video Indexer account dialog.

    Here are the descriptions for the resource fields:

    Name Description
    Subscription The subscription currently contains the classic account and other related resources such as the Media Services.
    Resource Group Select an existing resource or create a new one. The resource group must be the same location as the classic account being connected
    Azure Video Indexer account (radio button) Select the "Connecting an existing classic account".
    Existing account ID Select an existing Azure Video Indexer account from the dropdown.
    Resource name Enter the name of the new Azure Video Indexer account. Default value would be the same name the account had as classic.
    Location The geographic region can't be changed in the connect process, the connected account must stay in the same region.
    Media Services account name The original Media Services account name that was associated with classic account.
    User-assigned managed identity Select a user-assigned managed identity, or create a new one. Azure Video Indexer account will use it to access the Media services. The user-assignment managed identity will be assigned the roles of Contributor for the Media Service account.
  9. Click Review + create at the bottom of the form.

After connecting to ARM is complete

After successfully connecting your account to ARM, it is recommended to make sure your account management APIs are replaced with Azure Video Indexer REST API. As mentioned in the beginning of this article, during the 30 days of the transition state, “Get-access-token” will be supported side by side the ARM-based “Generate-Access token”. Make sure to change to the new "Generate-Access token" by updating all your solutions that use the API.

APIs to be changed:

  • Get Access token for each scope: Account, Project & Video.
  • Get account – the account’s details.
  • Get accounts – List of all account in a region.
  • Create paid account – would create a classic account.

For a full description of Azure Video Indexer REST API calls and documentation, follow the link.

For code sample generating an access token through ARM see C# code sample.

Next steps

Learn how to Upload a video using C#.