As of 1.18.3.2111, a managed user must have at least one shared library before they can access Live TV. If not, the client app will tell the user that they don’t have access to the server.
Before, I used to be able to share “All Libraries” with a user, and then uncheck each individual library. They’d then be able to only access Live TV.
I’m not able to downgrade at the moment, but the issue was also present in Stable: 1.18.2.2058.
Right now the workaround is to make a fake, empty library.