How RBAC works
Permissions are attached to roles, not to individuals. A new team member is given a role and immediately has the right access; when they change job, their role changes and the old access goes with it.
Typical roles in a streaming team
- Administrator: everything, including users and settings
- Content editor: upload, edit metadata, schedule and publish
- Programmer or curator: home page layouts and collections
- Marketing: coupons, campaigns and notifications
- Finance: revenue reports, payouts and refunds
- Support: look up subscribers, fix access, issue refunds within a limit
- Partner or licensor: read-only access to their own titles and reports
Why it matters
A streaming back office holds unreleased content, customer data and the ability to change prices. Limiting each person to what their job needs reduces both accidents and deliberate misuse, and is a common requirement of rights holders and of data-protection law.
What to check
- Whether roles are fixed or can be customized
- Whether access can be limited by region, brand or content owner
- An audit log of who changed what
- Single sign-on and two-factor authentication for staff
Last reviewed