Enterprise admin permissions matrix

Last updated on Jul 7, 2026

Review the permissions for each enterprise admin role in the Adobe Admin Console, grouped by area such as users, products, and storage.

Permissions	System admin	Contract admin	Product admin	Product Profile admin	User Group admin	Deployment admin	Support admin	Storage admin
Add domain (request/claim a domain)	✔
View domain and domain listing	✔
Manage domain encryption keys	✔
Manage default org password policy	✔
View default org password policy	✔

Permissions	System admin	Contract admin	Product admin	Product Profile admin	User Group admin	Deployment admin	Support admin	Storage admin
Grant system admin role to a user	✔
Revoke system admin role from a user	✔
Grant contract admin role to a user	✔	✔*
Revoke contract admin role from a user	✔	✔*
Grant product admin role to a user	✔	✔*	✔**
Revoke product admin role from a user	✔	✔*	✔**
Grant product profile admin role to a user	✔	✔*	✔**	✔**
Revoke Product Profile Admin role from a user	✔	✔*	✔**	✔**
Grant user group admin role to a user	✔	✔***	✔***	✔***	✔***
Revoke user group admin role from a user	✔	✔***	✔***	✔***	✔***
Grant deployment admin role to a user	✔					✔
Revoke deployment admin role from a user	✔					✔
Grant support admin role to a user	✔
Revoke support admin role from a user	✔
* Only for the contracts to which the admin is assigned and the products that are part of those contracts Only for products, product profiles to which the admin is assigned * Only for users added & user groups created by the admin

Permissions	System admin	Contract admin	Product admin	Product Profile admin	User Group admin	Deployment admin	Support admin	Storage admin
View contract details	✔	✔*
Add/remove contract admins	✔	✔*
Purchase products or licenses	✔	✔*
Accept initial Terms & Conditions	✔
Re-accept Terms & Conditions	✔	✔*
* Only for the contracts to which the admin is assigned and the products that are part of those contracts

Permissions	System admin	Contract admin	Product admin	Product Profile admin	User Group admin	Deployment admin	Support admin	Storage admin
Add user to org^#	✔	✔*	✔	✔**		✔
Bulk add users via CSV to org	✔
Remove user from org	✔
View user details and listing	✔	✔*	✔	✔**		✔***
Edit user profile	✔
Add Product Profile to user or group	✔	✔*	✔**	✔**
Remove Product Profile from user	✔	✔***	✔**	✔**
Add Product Profile to multiple users	✔	✔*	✔**	✔**
View product profiles for a user	✔	✔*	✔**	✔**
View product user listing	✔	✔*	✔**	✔**
^#You can only add up to 10 users at once * Only for the contracts to which the admin is assigned and the products that are part of those contracts Only for products, product profiles to which the admin is assigned * Only for users added & user groups created by the admin

Permissions	System admin	Contract admin	Product admin	Product Profile admin	User Group admin	Deployment admin	Support admin	Storage admin
Create user group	✔	✔*	✔**
Remove user group	✔
Add user to user group	✔	✔***	✔***	✔***	✔*** (can only add existing users)
Remove user from user group	✔	✔*	✔***	✔***	✔***
Assign user group to product license	✔	✔*	✔**	✔
Remove user group from product license	✔	✔*	✔**	✔***
View member of user group	✔	✔*	✔	✔	✔***		✔
View list of user groups	✔	✔*	✔	✔	✔***
* Only for the contracts to which the admin is assigned and the products which are part of those contracts Only for products, product profiles to which the admin is assigned * Only for users added & user groups created by the admin

Permissions	System admin	Contract admin	Product admin	Product Profile admin	User Group admin	Deployment admin	Support admin	Storage admin
View total number of licenses and/or consumables owned by the org	✔	✔*	✔**	✔**
View available products and product families	✔	✔*	✔**	✔
Edit product license descriptions or data	✔	✔*
Provision product license to a user	✔	✔*	✔**	✔**
Deprovision product license from a user	✔	✔*	✔**	✔**
Add new product license configuration	✔	✔*	✔**
Edit services available for specific product license	✔	✔*	✔**
View Permissions Tab	✔	✔*	✔**	✔**
Remove product access from a user (strip from all configs)	✔	✔*	✔**
* Only for the contracts to which the admin is assigned and the products which are part of those contracts ** Only for products, product profiles to which the admin is assigned

Permissions	System admin	Contract admin	Product admin	Product Profile admin	User Group admin	Deployment admin	Support admin	Storage admin
View / use Storage tab	✔							✔
View Active and Inactive user folders	✔							✔
Delete Inactive user folders and transfer content	✔							✔

Permissions	System admin	Contract admin	Product admin	Product Profile admin	User Group admin	Deployment admin	Support admin	Storage admin
View/use Packages tab	✔					✔

Permissions	System admin	Contract admin	Product admin	Product Profile admin	User Group admin	Deployment admin	Support admin	Storage admin
View support tab	✔	✔*	✔	✔	✔	✔	✔	✔
Manage support cases	✔						✔
* Only for the contracts to which the admin is assigned and the products which are part of those contracts

Admin roles and hierarchy

Learn with step-by-step video tutorials and hands-on guidance right in the app.

Join discussions, find answers, learn from experts, and share your knowledge.

Access your favorite Creative Cloud apps, services, file management, and more.