Access groups (AG) will allow you set any type of rule for your content. Mastering this feature will give you complete control of your OTT.


Step 1: Name your AG.


It is very important to choose a name that clearly represents the rule you want to give your content. This way you will remember it in a much easier way. 


eg: AG Name: No Spain. In this case this AG will allow access to all countries, except for users located in Spain. (we will show you how to configure this in the following steps). 


Step 2: Denied vs Allow rule.


1)    If you configure an AG with the Denied rule, this means that all users that fits “true” to this rule, will not have access to the content. 

2)    On the other hand if you configure an AG with the Allow rule, this means that all users that fits “true” to this rule, will have access to the corresponding Nunchee content. 


Important: In case there is a tie in the rule, the Denied rule has priority. eg: AG Allow rule fits true, and the Denied rule fits true, the AG will deny access to the content. 


Step 3: Different type of rules.


The “Allow” or “Denied” features have different type of rules, which are the following: 


a)    Platform rule (IOs, Android, Web browser, Roku, FireTV, AppleTV, among others).

b)    Language rule (ISO code)

c)    Country rule (geolocation based on IP (ISO code) 

d)    User rule (user id)

e)    Product rule (requires that the use purchase a Nunchee product)

f)    IP rule (IP range)

g)    MCC/MNC (Mobile Country Code and Mobile Network Code a.k.a: Telecom Carrier)


Rule value: Every rule needs to have a value in order to be taken under consideration:


1)    If the rule has a value of 0, it is missed. 

2)    If the rule has a value, it is taken in consideration and the system evaluates the result of each attempt. eg: Allow rule - type language: For every attempt of the user the system verifies, if the field "profile.language" of the user is equal to "ES" (ISO code), If the allow rule is true, the system will allow access to that specific Nunchee content. 

3)    If the rule has multiple values, the system evaluates that rule with a “or” methodology. This means that the system will verify if the rule fits the “value 1” or “value 2” or “value n”. If the user fits any of this values the AG rule will be marked as true. eg: Continuing the same example, if we add another value to the allow rule - type language: “ES” or “EN”, this means that this AG will be true if the content has the "profile.language" in english or in spanish. 


One AG can have one or more than one rule.


1)    If the AG has one rule, the system will evaluate the rule as we described before.  

2)    If the AG has more than 1 rule, the system will evaluate each one of them as described before. Then the results will be evaluated combining an “and” between every rule. This means that if an AG has several rules, in order to be considered as true, each one them needs to be marked as true. If at least one of the rules is marked as false, the whole AG will be marked as false. 


eg: Let's assume the following example: 


Allow:

    1.    Rule Country "Chile", "Argentina" 

    2.    Rule Language "EN"


If the AG is evaluated by a user in Argentina (AR), with “profile.language” in Spanish (ES), the system will performed the following: 


1)    The first rule will be marked as True as the user is in Argentina. The AG has more than 1 value, so the system evaluates each value with an “or” condition. It`s true that the user is in Argentina or in Chile = True. 

2)    The second rule is False. As we quoted before, the "profile.language" of the user in the example is “ES” (Spanish), so the system will evaluate as false.  

3)    As we explain before, the condition for more than 1 rule, will be evaluate using “and” between them. In this case as the second rule is False, the entire AG will be marked as False. The user does not have access to the content. 

 

There can be multiple Access Groups per content.

 

When multiple AG are applied to one content, each AG is evaluated separately as described before. The result of each AG then is combined using the "or" variable. The final result for this content is the combination of results of AG1 or AG2 or AGn. eg: 

 

Access Group 1:

    Allow:

        1.    Rule Country: "Chile", "Argentina"

        2.    Rule Language: "EN" 

 

Access Group 2:

    Allow:

        Rule Platform: "iOS"


If the AG is evaluated by a user in “AR” (Argentina), with “profile.language” in Spanish from an iOS Platfotm, the final result will be the following: 


Access Group 1:


1)    The first rule will be marked as True as the user is in Argentina. The AG has more than 1 value, so the system evaluates each value with an “or” condition. It`s true that the user is in Argentina or in Chile = True

2)    The second rule is False. As we quoted before, the "profile.language" of the user in the example is “ES” (Spanish), so the system will evaluate as false. 

3)    As we explain before, the condition for more than 1 rule, in the same AG, will be evaluate using “and” between them. In this case as the second rule is False, the entire AG will be marked as False. The user does not have access to the content.


Access Group 2:


1)    The Allow rule for Platform, value = iOS in this case is True, because the user is accessing Nunchee from an iOS device. In this case the 2nd AG is evaluated as True.


Final decision


As we explain before, whenever there are multiple AG in the same content, each AG will be evaluated using the "or" variable. In order to Allow access to the content, AG1 or AG2 needs to be True. As AG2 is True, the user will have access to the content. 


Nunchee tip: Remember that you can use AG to create different business rules in the Nunchee platform. You can add Access Groups to the content, to content playlist, to posts, to videos, type of contents and so on! All this will have a different effect on the user interface of your OTT. Let us explain better with one example. 


User case: What should I do if I have the content rights of Series “X” only for Brazil. Where should I put the AG? Answer: 


Depends on what you want to show: 


Case 1: Show the content everywhere, but only users in Brazil would be able to watch the video.

 

If this is the case, our video experts recommend to create the following AG: 


Access Group Name: Allow Brazil

    Allow:

        Rule: Country: "Brazil"



After you create this AG, you should add this condition to the video you are editing. Go to Section Content >> Media Library, and then choose the video you want to edit.  

 


In this case the video is the one that has the AG condition. Only user that are in Brazil will be the ones that would be able to watch the content. 


Case 2: Do not show the content in countries that I don't have rights. (Rights only in Brazil). 


In this case, I should add the access group that I already created (Allow Brazil) in the Content Manager, VOD section. In this case the Access Group will be affecting the entire content and not just the video. The end up result will be that this content will be shown only in Brazil, not elsewhere like the example before.