In Grabyo Live, an Organization is the top-level account boundary that contains the people, shared resources, configuration and production capabilities used by a customer or team. It is the administrative container around the platform experience.
Video walkthrough
What an organization is
An organization brings together the account-level elements required to operate Grabyo Live. Rather than managing everything inside a single control room, shared setup and access are managed centrally. Within an organization, teams typically manage:
Users — the individual people who can sign in
Roles — the permission sets that determine what those people are allowed to do
Groups — the resource entitlements that determine which shared resources they can access
Control rooms — the live production environments used to run productions
Shows — the production records and recordings created from live output
Asset Library — the shared asset store used across control rooms
Setup — shared configuration such as production slots, key bindings, media profiles and tags
Cloud instances and account infrastructure — the underlying resources made available to the organization
Authentication
Authentication is configured at organization level so that sign-in behaves consistently for everyone in the account, rather than being set per control room or per production.
Administrators manage this from a dedicated Authentication tab, which balances system security with operational flexibility.
Session and multi-factor security
Session duration — define how long users remain logged in before re-authentication is required
Multi-factor authentication — toggle MFA on or off for the organization
Password complexity — fully customise the rules a password must satisfy
Single sign-on (SSO)
Integrate an external identity provider by enabling SSO and uploading a SAML configuration file. For tighter corporate control, SSO can be strictly enforced for specific email domains, so anyone signing in with an address on those domains must authenticate through the identity provider.
Flexible login mechanisms
Both traditional passwords and one-time passwords (OTPs) are supported, and administrators can update these methods instantly. Disabling password login immediately routes users to the OTP interface; re-enabling it restores both options.
Organization switching
Grabyo Live isolates customers into separate, sandboxed organizations. External personnel — freelancers working across multiple accounts, for example — can switch between entities by entering a specific Organization ID, which starts that organization's own controlled login process.
Invitations — a new user is invited from the Users page and completes authentication setup before their access becomes active
Account status — an invited, active or disabled state determines whether a person can authenticate at all, independently of their role
Authentication alone grants no capability. A user who can sign in still sees only what their role and group assignments allow
Where organization administration happens
Organization administration is spread across the shared platform navigation and account-level management areas rather than hidden inside production workflows. Administrators can expect to work across:
Users for adding, reviewing, updating and removing people
Roles for defining or applying permission models
Groups for controlling resource access
Setup for reusable account configuration
Home, Shows and Asset Library for platform-wide operational visibility
Common role types
Role names and enabled permission combinations vary by account configuration, so it is more reliable to think about roles by capability than by label. The broad role types below apply at organization level.
Role type | Primary purpose | Typical examples |
Organization administrator | Manage account setup, people and shared configuration | User management, roles, groups, setup, shared platform configuration |
Production administrator | Prepare and manage production resources | Control room access, production slots, profiles, operational setup |
Producer or operator | Run live productions | Vision mixing, audio operations, using assets, running shows |
Content or media manager | Manage shared assets and related resources | Upload, organise, replace, review and reuse shared assets |
Viewer or limited-access user | Observe or review without broad control rights | Show review, visibility into running productions, limited asset access |