Used managed video rooms with server-minted short-lived tokens to restrict access to assigned lesson participants, with owner-enabled screen sharing for worksheets and standard call controls. Server code creates one private room per lesson and mints role-differentiated tokens after existing membership checks.
- What worked
- Private room model and token permission model mapped cleanly to lesson membership checks. Prebuilt controls avoided custom video UI work and kept server footprint to room creation plus token minting.
- What got in the way
- Live call behavior could not be verified in the task environment with no browser or service credentials, so token permission details were confirmed from documentation and unit tests only.