Manage access to an Azure Video Indexer account

In this article, you'll learn how to manage access (authorization) to an Azure Video Indexer account. As Azure Video Indexer’s role management differs depending on the Video Indexer Account type, this document will first cover access management of regular accounts (ARM-based) and then of Classic and Trial accounts.

To see your accounts, select User Accounts at the top-right of the Azure Video Indexer website. Classic and Trial accounts will have a label with the account type to the right of the account name.

Image of accounts.

User management of ARM accounts

Azure role-based access control (Azure RBAC) is used to manage access to Azure resources, such as the ability to create new resources or use existing ones. Using Azure RBAC, you can segregate duties within your team and users by granting only the amount of access that is appropriate. Users in your Azure Active Directory (Azure AD) are assigned specific roles, which grant access to resources.

Users with owner or administrator Azure Active Directory (Azure AD) permissions can assign roles to Azure AD users or security groups for an account. For information on how to assign roles, see Assign Azure roles using the Azure portal.

Azure Video Indexer provides three built-in roles. You can learn more about Azure built-in roles. Azure Video Indexer doesn't support the creation of custom roles.

Owner - This role grants full access to manage all resources, including the ability to assign roles to determine who has access to resources.
Contributor - This role has permissions to everything an owner does except it can't control who has access to resources.
Video Indexer Restricted Viewer - This role is unique to Azure Video Indexer and has permissions to view videos and their insights but can't perform edits or changes or user management operations. This role enables collaboration and user access to insights through the Video Indexer website while limiting their ability to make changes to the environment.

Users with this role can perform the following tasks:

  • View and play videos.
  • View and search insights and translate a videos insights and transcript.

Users with this role are unable to perform the following tasks:

  • Upload/index/re-index a video.
  • Download/embed video/insights.
  • Change account settings.
  • Edit insights.
  • Create/update customized models.
  • Assign roles.
  • Generate an access token.

Disabled features will appear to users with the Restricted Viewer access as greyed out. When a user navigates to an unauthorized page, they receive a pop-up message that they don't have access.

Important

The Restricted Viewer role is only available in Azure Video Indexer ARM accounts.

Manage account access (for account owners)

If you're an account owner, you can add and remove roles for the account. You can also assign roles to users. Use the following links to discover how to manage access:

User management of classic and trial accounts

User management of classic accounts, including the creation of new users, is performed in the Account settings section of the Video Indexer website. This can be accessed by either:

  • Selecting the User accounts icon at the top-right of the website and then settings.
  • Selecting the Account settings icon on the left of the website.

Image of account settings.

Share the account

In the Account setting section, select Manage Roles to view all the account users and people with pending invites.

To add users, click Invite more people to this account. They'll receive an invitation but you also have the option to copy the invite link to share it directly. Once they've accepted the invitation, you can define their role as either Owner or Contributor. See above in the ARM Account user management section for a description of the Owner and Contributor roles.

Image of invited users.

Next steps

Overview