Overview

When companies grow or already have a certain size, more and more people need access to its account, either to use it in order to start encodings, or have a look into the usage statistics, analytics data, add new domains to your player license and so on. Sharing the credentials was typically the initial way to deal with those needs, however its not a handy one, nor allows it to specify access rights for each user. Multi Tenant comes to the rescue :)

It enables you to invite others (developers, finance team, operations, devops) dedicated access to your Bitmovin Account, by assigning them to Groups with a set of Permissions, so they can View or Manage specific resources and configurations in your Organisation.

Terminology

Everyone who signs up for an Bitmovin Account, creates an Organisation and a User who is the owner of this Organisation. In your dashboard you find those in the top menu bar:

Bitmovin Account
A Bitmovin Account is created when someone signs up at https://bitmovin.com/dashboard/signup or gets invited to an Organisation.

• Organisation
  It holds all the resources you can create in the Dashboard or through the Bitmovin API (Encodings, Inputs, Outputs, Configurations, Manifests, etc.), as well as the Subscriptions for each of our Services. Further, one or more Users can be part of an Organisation.
  • User (Owner, You)
    A User is by default the Owner of the Organisation of its own Bitmovin Account.
  • Groups
    Groups have specific Permissions assigned to it to control which actions its members can perform in an Organisation.
    • Users
      A User can become a member of other Organisations by being added to one or more of its Groups. Users that are added to other Organisations are also referred to as Tenant-Users.
    • Permissions
      Permissions can be assigned to Groups to control what resources its members are allowed to View or Manage of an Organisation.

Invite Users to your Organisation

You can grant others access to your account by inviting them using their email address, and assigning them to one or more Groups.

1) Go to "Organisation Settings => Team"

2) Click the “+ Add” button right next to “Users”

Enter the email address of someone you want to provide with access to your organisation. If a ...

• Bitmovin Account with this Email doesn't exist yet - The owner of the email address will receive an invitation email to create their own Bitmovin Account. Once done, they can select your Organisation in the top menu bar, and switch to it.
• Bitmovin Account with Email already exists - All the Invitee has to do is to select the Organisation in the top menu bar in order to switch to it.

By default, you have three predefined groups available you can choose from:

• Devops Allowed to view encoding, player, and analytics resources
• Account Admins Allowed to view and manage account settings
• Product Admins Allowed to view and manage encoding, player and analytics resources

Select the group you want the user to be part of, and click on “+ Add”.

Create a new group

If none of the predefined groups fits your needs, you can create a custom group with custom permissions. In order to create a custom group, go to your "Team" settings, and click on the “+ Add” button next to “Groups”:

Its recommended to use a descriptive name and description, so it is easy to see what set of permissions are configured for this group. By default, if no permissions are added to a group everything will be denied. So, by adding permissions you can allow specific actions that users of this group can perform.

Set permissions for a group

In order to edit permissions of a group, and its members, go to your "Team" settings page, and click on the "Edit" button next to the group name and description. There you can grant View and/or Manage access to the different resources and products available to your Organisation.

• View - Allows to view the resources only (API SDK: GET Requests only)
• Manage - Allows to create/edit/delete resources (API SDK: POST/DELETE Requests only)

Available Policies:

• Encoding - Control access to all encoding related resources and its API's
  ^{VoD/Live/PerTitle Encodings and Object Detection, Configurations, Inputs, Outputs, Filters, Manifests, Infrastructure, Statistics}
• Notifications - Controls access to email- and webhook notifications for encoding events and its API's
  ^{(Email, Webhook)}
• Player - Controls access to all player related resources and its API's
  ^{(Licenses, Statistics)}
• Analytics - Controls access to all analytics related resources and its API's
  ^{(Licenses, Queries, Metrics)}
• Account - Controls access to Bitmovin Account related areas
  ^{(Account Settings, Organisation Settings)}
• Billing - Controls access to all billing and subscription related areas
  ^{(Subscriptions, Payment Methods, Billing Information Details)}

Using an API SDK with different Organisations

By default, in order to use any of our API SDK's available, you provide it with the API Key of your own Bitmovin Account to authenticate your requests and have them executed in your own Bitmovin Account and Organisation.

To execute API calls in other Organisations you got invited to, you have to provide the Organisation ID when initialising the API SDK. Doing so, your API calls will be executed in this particular Organisation instead of your own. You can only execute acctions that you are permitted to based on the permissions of your Group.

In addition to the quick start guide that shows how you get started using our API and its SDK's, you can provide the ID of the Organisation you want to perform actions in using the withTenantOrgId() method:

BitmovinApi bitmovinApi = BitmovinApi.builder()
    .withApiKey("YOUR_API_KEY_HERE")
    .withTenantOrgId("YOUR_ORGANISATION_ID_HERE")
    .build();

Now, all API calls using this API SDK instance will be performed in the provided organisation instead of your own.