Sign in to the Admin Console and go to Products.
-
Setup and onboarding
- Explore Adobe Admin Console
- Sign-in and access
-
Plan your deployment
- Basic concepts
- Deployment Guides
-
Deploy Creative Cloud for education
- Education Deployment Home
- Education Deployment K-12 Onboarding Wizard
- Education Deployment Simple Setup
- Education Deployment Setup With User Sync
- Education Deployment Setup with Roster Sync
- Education Deployment Key licensing Concepts
- Education Deployment Setup Concepts
- Education Deployment Quick Tips
- Approve Adobe apps in Google Admin Console
- Enable Adobe Express in Google Classroom
- Integrate Adobe Creative Cloud and Adobe Express with Canvas LMS
- Adobe Creative Cloud & Blackboard Learn
- Configuring SSO for District Portals and Learning Management Systems
- Roster syncing for license assignment with the Adobe Admin Console
- Kivuto FAQ
- Primary and Secondary Institution Eligibility Guidelines
-
Licensing
- Licensing overview
- Licensing types
-
Set up your organization
- Identity overview
- Set up identity and Single Sign-On
- Set up organization with Enterprise ID
- Setup Azure AD federation and sync
- Set up Google Federation and sync
- Configure Microsoft AD FS for use with Adobe SSO
- Configuring SSO for District Portals and Learning Management Systems
- Set up organization with other Identity providers
- SSO common questions and troubleshooting
- Set up Frame.io for enterprise
-
Identity and SSO
- Set up identity
- Integrate with Microsoft Entra
- Integrate with Google Sync
- Integrate with other SSO providers
- Troubleshoot
-
Manage your organization setup
- Manage existing directories and domains
- Enable automatic account creation
- Domain Enforcement for restricted authentication
- Set up organization via directory trust
- Migrate to a new authentication provider
- Asset settings
- Manage authentication settings
- Limit product access by IP addresses
- Privacy and security contacts
- Console settings
- Manage encryption
-
Directories, domains, and access
-
Directories and domains
- Create a directory for SAML identity providers
- Verify domain ownership
- Set up domains for directory authentication
- Move domains across directories
- Encrypted and trusted directory domain transfers
- Move directories between Admin Consoles
- Delete directories and domains
- Automatic account creation overview
- Enable automatic account creation
- Automatic federated account creation FAQ
- Domain enforcement
- Directory trusting
-
Directories and domains
-
Manage users
- Adobe Admin Console users
- Administrative roles
- Assign user roles for granular access control
- How to create custom roles
- Manage Frame.io account roles in Adobe Admin Console
- User management strategies
- Assign a license to teams user
- Team Management: Creative Cloud desktop app, Acrobat, Express
- Adobe's matching service
- Edit user identity type
- Manage user groups
- Manage directory users
- Exclude specific users from domain enforcement
- Manage developers
- Migrate existing users to the Adobe Admin Console
- Migrate Frame.io user management to the Adobe Admin Console
- Admin roles and hierarchy
- Enterprise admin permissions matrix
-
Settings
- Asset settings
- Manage encryption
-
Manage products and entitlements
-
Manage products and product profiles
- Manage products on Admin Console
- Add products and licenses
- Manage product profiles for enterprise users
- Manage automatic assignment rules
- Adobe Express Photos FAQs for administrators
- Assign users to Firefly custom models
- Enable Shared Credits for your organization
- Manage product requests
- Manage self-service policies
- Manage app integrations
- Manage product permissions in the Admin Console
- Single App | Creative Cloud for enterprise
- Manage Shared Device licenses
-
Manage products and product profiles
-
User management
- Understand user management
- Manage users and groups
- Manage admins
- Manage user roles
- Migrate users
-
Get started with Global Admin Console
- Adopt global administration
- Select an organization in the Global Admin Console
- Manage organization hierarchy
- Manage product profiles
- Manage administrators
- Manage user groups
- Create license assignment reports for multiple organizations
- Update organization policies
- Manage policy templates
- Allocate products to child organizations
- Execute pending jobs
- Download audit logs and export reports
- Export or import organization structure and product allocations
-
Products and entitlements
- Manage products
- Manage product profiles
- Special programs plans
- Manage entitlements
- Manage automatic assignment
- Manage product access
- Manage self-service policies
- Manage app integrations
- Frame.io integration
- Manage product permissions
-
Manage storage and assets
- Storage
- Manage projects
- Asset migration
- Reclaim assets from a user
- Student asset migration | EDU only
- Manage storage and assets
-
Manage services
- Manage services in the Admin Console
- Configure services
- Optional services
- Adobe Stock
- Enable Shared Credits for your organization
- Custom fonts
-
Adobe Asset Link
- Adobe Asset Link
- Adobe Asset Link Overview
- Create user group for Adobe Asset Link
- Configure Experience Manager Assets as a Cloud Service
- Deploy Adobe Asset Link
- Configure Adobe Experience Manager 6.x Assets for Adobe Asset Link
- Manage assets using Adobe Asset Link
- Adobe Asset Link for Adobe XD
- Troubleshoot Adobe Asset Link
- Known issues with Adobe Asset Link
- Adobe Acrobat Sign
-
Deploy apps and updates
- Overview
-
Create packages
- Packaging apps via the Admin Console
- Create Named User Licensing Packages
- Manage pre-generated packages
- Manage Packages
- Customize packages
- Deploy Packages
- Manage updates
- Adobe Update Server Setup Tool (AUSST)
- Adobe Remote Update Manager (RUM)
-
Deploy apps and updates
- Prepare for deployment
- Manage pre-generated packages
- Create packages
- Customize end-user experience
- Deploy packages
- Use third-party deployment tools
-
Manage Shared Device Licensing (SDL)
- Shared Device Licensing overview
- Deploy Shared Device Licensing
- Manage SDL profiles and user access
- Activate shared device licenses
- Use the Shared Device Licensing toolkit
- Recover shared device licenses
- Shared Device Licensing identity FAQ
- Shared Device Licensing deployment FAQ
- Shared Device Licensing access FAQ
- Known issues in Shared Device Licensing
- Adobe Update Server Setup Tool (AUSST)
- Adobe Remote Update Manager (RUM)
- Troubleshoot
-
Manage your Teams account
- Manage your account
- Complimentary membership for team members
- Update payment details on your Teams account
- Download and email invoices
- Change the contract owner of your Teams account
- Change your Creative Cloud for teams plan
- Change reseller
- Cancel Creative Cloud for teams licenses
- Purchase Authorization Compliance
- Contracts and renewals
- Renewals
- Reports and logs
-
Manage contracts
- Automated expiration stages for ETLA contracts
- Switching contract types within an existing Adobe Admin Console
- Manage trials and special offers
- Complimentary membership for team members
- Creative Cloud for enterprise - free membership
- Frame.io and Creative Cloud for teams and enterprise plans
- Value Incentive Plan (VIP) in China
- VIP Select Help
-
Get started with Global Admin Console
- Get started
- Manage your organization
- Reports audit
-
Get help
- Enterprise and teams | Contact Adobe Customer Care
- Support options
- Teams | Support and Expert Sessions
-
General troubleshooting
- Microsoft Purview Information Protection support in Acrobat
- Use the Creative Cloud Cleaner tool to fix installation issues
- Fix app launch errors on Shared Device Licensing machines
- Technical support boundaries for virtualized or server-based environments
- Resolve trial and license expired errors
- Migrating to OAuth Server-to-Server Credentials
- Manage device authentication for Creative Cloud and Acrobat Pro
- Enterprise | Support and Expert Sessions
Apply self-service policies
Last updated on
Aug 3, 2026
Create self-service policies to control which Creative Cloud apps your enterprise users can install, update, and access on their devices.
Self-service policies let you configure how end users install and update Creative Cloud apps through the Creative Cloud desktop app.
Before you begin
- Self-service policies apply only to product profiles based on Creative Cloud products. They are not available for Document Cloud or other non-Creative Cloud product profiles.
- Self-service policies are available only for Named User Licensing. They are not available for Shared Device Licensing.
As a system or product profile admin, you apply self-service policies at the product profile level. This ensures the policy applies to every end user in that product profile.
Configure self-service policy settings
Select a product, then select the product profile where you want to manage self-service policies.
Go to the Permissions tab and select Edit on the Self-service policies line item.
Turn on the Self-service policies toggle.
Select one policy type: User Managed, Restricted, or Enforce Auto-update.
User-managed policies grant users varying degrees of autonomy while giving you tools to control when and how updates occur. Restricted policies prevent users from installing or updating applications through the Creative Cloud desktop app.
Select Save.
The self-service policy applies to all users in the product profile within 24 hours. Users can sign out and sign back in, quit and relaunch the Creative Cloud desktop app, or select Check for updates to apply the policy immediately.
Note
Self-service policies apply at the Creative Cloud desktop app level and affect all Creative Cloud apps, not just the apps included in the selected product profile.
User Managed
Select User Managed to let users install and update applications themselves. When User Managed is selected, choose any combination of the following checkboxes:
- Automatically update all applications: Makes the Auto-update toggle visible to end users in the Creative Cloud desktop app under Preferences. When users turn this on, their apps update automatically as new versions are released. End users must still turn on Auto-update themselves; this policy only makes the option available to them.
- Make updates available 30 days after release: Delays new app versions in your end users' Creative Cloud desktop app by 30 days after Adobe releases them.
- Enable "show older apps" option in Creative Cloud desktop app: Makes the Show older apps toggle visible under Preferences in the end user's Creative Cloud desktop app. When users turn this on, they can view, install, and update end-of-life apps such as Adobe Muse. If this checkbox is not selected, end users will not see this toggle.
These three checkboxes are not mutually exclusive, so you can select more than one. Some common combinations:
- Automatically update all applications + Make updates available 30 days after release: Turns on auto-update for end users, delayed by 30 days after release.
- Make updates available 30 days after release + Enable "show older apps" option (without Automatically update all applications): Requires users to manually update apps, delays those updates by 30 days, and gives access to end-of-life apps.
- Automatically update all applications + Enable "show older apps" option: Turns on auto-update and gives access to end-of-life apps.
Restricted policies
Select Restricted to disable the Apps panel in the Creative Cloud desktop app. This prevents end users from installing or updating apps, and they see and error when trying to view the Apps panel.
Enforce Auto-update
Select Enforce Auto-update to prevent users from turning off auto-update. This gives admins more control over update policies and saves time by avoiding per-device updates.
User's experience: When Enforce Auto-update is enabled, the Auto-update setting appears locked in the user's Creative Cloud desktop app, and their apps update automatically.
Tip
Users can still manually install or update any app. Enforce Auto-update only prevents them from turning off automatic updates.
