Admin roles and hierarchy

Last updated on Jul 7, 2026

Understand how admin roles create a flexible structure for delegating responsibilities and controlling access.

The Adobe Admin Console provides a hierarchical admin system that lets you distribute management responsibilities across your organization while enforcing security boundaries. System admins have the highest level of access and are the only role that can assign or modify other admin roles.

For a detailed list of permissions and privileges for each admin role, see Permissions. To learn about the global admin role, see Manage administrators in the Global Admin Console.

Role

Description

System admin

Manage the organization as a superuser with unrestricted admin console access to assign roles and responsibilities to others, including identity configuration, user provisioning, product assignment, and all admin role assignments.

Contract admin

Manages the contracts with restricted access to:

  • Add/remove Contract admins
  • View contract details
  • Assign/unassign users to products
  • Purchase additional licenses for their assigned contracts

Product admin

Manage assigned products and associated profile access:

  • Create product profiles
  • Upload custom fonts
  • Add users and user groups to the organization, but don't remove them
  • Add/remove users and user groups from product profiles
  • Add/remove Product Profile admins from product profiles
  • Add/remove other product admins from the product
  • Add/remove Group admins from groups

Product profile admin

Handles user membership within assigned product profiles:

  • Add users and user groups to the organization, but do not remove them
  • Add/remove users and user groups from product profiles
  • Assign/revoke product permissions to users and user groups from product profiles
  • Manage product roles of users and user groups for product profiles

User group admin

Manage membership for assigned user groups, adding or removing users from groups that simplify bulk license assignment and profile management.

Deployment admin

Creates, manages, and deploys software packages and updates to end users.

Support admin

Manage access to support-related information, such as customer-reported issues. There are two types of support (non-administrative) admins:

  • Basic support admin: Has support access for all products except Marketo.
  • Product support admin: Has support access to specific Marketo instances.

Storage admin

Manages organization storage settings:

  • View storage consumption of both active and inactive users
  • Transfer contents to other recipients
  • Create shared folders for Libraries in business storage