Overview of users management

Live Hub provides you with a sophisticated, yet easy-to-use identity and access management functionality for handling Live Hub users (and REST API clients) per Live Hub account.

IAM functionality allows you to assign each user with access rights (privileges) to various Live Hub resources. This is done by assigning the user to one of the predefined User Groups. A User Group is associated with predefined Policies. Each Policy defines the roles (access rights) that the user is allowed to do in Live Hub.

For a list and explanation of the User Groups and Policies:

To view the list of the predefined User Groups and their associated Policies, click Predefined User Groups.
To view the list and description of the predefined Policies, click Predefined Policies.

For example, you can assign user "John" to User Group "Administrator", which gives read-write privileges to all Live Hub resources (e.g., create bots, create SIP connections, define billing settings, etc.). On the other hand, you can assign user "Sue" to User Group "Monitor", which gives read-only privileges to Live Hub resources.

You can assign (invite) multiple users to the same Live Hub account. Conversely, a user can belong to multiple accounts. When assigned to multiple accounts, you can assign each user with different access rights (User Groups) per account. When inviting a user, you choose the user's access rights (User Group) for that specific account.

The IAM functionality is also used to manage non-human users called REST API clients. When you add an API client, a client ID and a client secret (token ID) are automatically generated. The client secret is used for authenticating the API client with Live Hub. Similar to regular users, Live Hub's IAM functionality is also used to assign access rights to API clients.

Only users with Account Manager rights to an account can manage users using IAM functionality.

You can also use your organization's Microsoft Azure Active Directory (now known as Microsoft Entra ID) to manage Live Hub users (including access rights). If this is the case, you can still use Live Hub's IAM functionality to add access rights on top of those defined by Azure.