Introduction

As an Enterprise IT administrator, User Management enables you to create, search, update, and remove user accounts.  These user accounts entitle the end users in your organization to Adobe products and services.  You can use the following methods to manage your users:

Single user account management Bulk user account management User Sync tool User Management API
Manage (create, delete, and update) user accounts individually Manage user accounts in bulk using preformatted CSV file uploads

Provides an easy way to sync users from your existing Directory Services (such as Microsoft Active Directory), with the Adobe Admin Console.

Download or fork simple Python-based open source tool User Sync tool on github.

See also:

User Sync tool

User Management API user forum

Provides access to the Adobe user accounts that are associated with your organization. You can integrate this API into your organization's administrative applications and processes.

See also:

Getting Started with User Management

If you're using Named licenses, product configurations are used to associate the licenses with individual users. Add users to a product configuration to assign licenses. You can assign one or more licenses to a product configuration, and all users added to that product configuration are licensed to use the apps and services. A user can be a member of multiple product configurations, and each product configuration can confer different licenses to the user. A user's final eligibility is the union of all licenses conferred by each product configuration. For more information, see Administrative Roles.

Products and services use an identity management system to determine an end user's entitlements. A user is recognized based on their ID. Adobe supports three identity types for Creative Cloud: Adobe ID, Enterprise ID, and Federated ID. For more information, see Manage Identity types.

Add users

  1. In the Admin Console, choose User Management > Users.

  2. Click .

    The Add New User dialog box opens.

  3. Enter the email address of the user.

    In the Add New User dialog, you can, optionally, choose the product configuration to which to add the user. If necessary, you can give this user administrative privilege.

  4. To add this user to one or more product configurations, click Add Products and select these product configurations from the drop-down list.

  5. To give this user administrative privilege, click Add Admin Rights and choose administrator roles from the drop-down list.

  6. Click Add.

    Note:

    If one or more of the product configurations that you select are purchased under the VIP licensing program, and all the licenses have been consumed, the following message is displayed:

    add-more-vip-license-for-user

    You need to first purchase VIP licenses for the required products. For more details, see Adobe Value Incentive Plan (VIP).

If you've invited a user with an email address containing a domain claimed by your organization or a domain for which your organization is a trustee, the user receives a welcome email. Users need to follow the link to complete their profile and specify a password to use with this account.

For email addresses outside the claimed domain, an email invitation is sent to the user to join your organization. Users need to accept the invitation, and sign in with their Adobe ID. If users don't have an Adobe ID, they can sign up to create one. The invitation is only valid for the email address it was sent to, and cannot be forwarded. Until users accept the invitation, they're listed under the Pending Invitations tab.

Edit users

If an organization includes Enterprise ID or Federated ID type users, any changes that are required to be made to the user details will need to be made by an administrator of that organization.

Adobe ID type users, however, will need to make changes on adobe.com. Any changes to the personal details will be immediately visible to administrators. However, no notification is sent to the administrators regarding the changes.

For information about identity types, see Adobe-supported identity types.

Note:

To search for a user, click Search () in the upper-right corner of the page, and enter a name or email address. Additionally, if you're searching by full name, follow the naming convention for the user's country.

Enterprise ID or Federated ID type users

For Enterprise ID or Federated ID type users, personal detail changes will need to be made by an administrator in the Admin Console or by using the User Sync tool or the User Management API. The changes take effect immediately, however, the user is not notified. This implies that if you change email addresses for an Enterprise ID type user, you will need to inform the users to use the new email address to log in to the Adobe enterprise account.

For Federated ID type users, changes in the email address will affect the user login only if email addresses have been used as the identifier in the SAML handoff between Adobe and the organization's Identity Provider.  If your organization is using email addresses in the handoff, then the change in email addresses has to be done simultaneously on both sides or users will be unable to log in to their enterprise accounts. However, if your organization has implemented user names in the handoff, any updates to the email addresses will not impact the user logins. The type of handoff is determined by the User Login Setting in the domain configuration for Single Sign-On. For details, see Configure SAML settings.

Note:

Adobe recommends that for Federated ID type users, you use the User Sync tool or the User Management API to synchronize the changes between their directory and the Adobe directory on a regular basis, to avoid issues of users going out of sync.

Note:

As an administrator, you will only have access to update details for users belonging to organization for a domain that you own. You cannot update details for users who belong to a domain that you trust but do not own.

Edit Enterprise ID or Federated ID users in Admin Console

  1. In the Admin Console, choose User Management > Users.

  2. From the list of users, click a user whose details you need to update.

    Note:

    You can only update user details for Enterprise ID or Federated ID type users who belong to domain that you own.

  3. In the Account Settings panel, edit the required details and click Save () in the upper-right corner of the panel.

You are taken back to the list of users.

Add multiple users

You can add multiple users to your organization and provision them to product configurations at the same time by uploading a comma-separated list. You can download a sample CSV file from the Import Users dialog and then fill the details and upload the file. You can import up to 5,000 users at a time.

Users with Adobe ID receive an invitation email, and need to accept it to join the organization. Users with Enterprise IDs receive a welcome email. Users with Federated IDs receive no communication and are added to the enterprise automatically.

Note:

The Import Users feature does not support user names having special characters, such as the comma (,) and the semicolon (;).

  1. While you are working on users in the Admin Console, go to the Active users or Pending invitations tabs.

  2. Click Perform bulk operations ( ) in the upper-right corner and in the drop-down list, choose Bulk add users.

  3. In the Bulk add users dialog, download the Sample template of the CSV file that will provide you with the structure of data required.

    bulk-add-users-dialog

    The downloaded file contains the following data:

    • Identity Type
    • Username
    • Domain
    • Email
    • First Name
    • Last Name
    • Country Code
    • Product Configurations
    • Admin Roles
    • Product
    • Configurations Administered
    • User Groups
    • User Groups Administered

    For a description of these fields, see CSV File format.

  4. Update the downloaded file with the data of users that you want to add to the configuration.

    Note:

    You can upload a CSV file size of up to 10 MB.

  5. Click Yes to confirm the bulk add users operation.

After the bulk operation is complete, you will receive an email. You can also view a detailed report of the operation, on the Users > Bulk operations results tab.

CSV File format

The template file that you download, contains sample data that you can use as a guide. The fields in the CSV file are as follows:

Field Name Description Options
Identity Type

Enter the type of user to add.

 

Valid values:

  • Adobe ID
  • Enterprise ID
  • Federated ID
Username

User name for that user based on the identity type:

  • Adobe ID: User name is mandatory and must be the same as the email address (below)
  • Enterprise ID: User name is mandatory and must be the same as the email address (below)
  • Federated ID: User name is mandatory. Does not need to be the same as the email. But must be in email format - abc@def.xyz

Maximum length is 255 characters.

 

Domain Domain as it corresponds to the Enterprise or Federated ID Mandatory if Identity Type is Federated ID.
Email Valid email address. If Identity Type is Enterprise ID or Federated ID, the domain must be claimed and activated by the organization.
First Name First Name of the user. 

Maximum length is 255 characters.

Mandatory if identity type Enterprise ID or Federated ID.

Last Name Last name of the user.

Maximum length is 255 characters.

Mandatory if identity type Enterprise ID or Federated ID.

Country Code ISO Alpha-2 code country code for the user

To determine the CountryCode, see https://www.iso.org/obp/ui/#home

Mandatory if identity type Enterprise ID or Federated ID.

Product Configurations
The name of the Product Configurations to assign to the user.

To assign the user to multiple product configurations, enter all the desired Product Configurations in quotes, separated by commas.

For example, "Audience Management: Audience Manager - Default Access, Custom plan only - Custom plan - Design"

Admin Roles Administrative role to assign to the user.

Valid values:

  • System
  • Deployment
  • Product
  • Product Configuration
  • User Group
Product
Configurations Administered
The name of the Product Configurations to grant administrative privileges to the user.
To assign administrative privileges for multiple product configurations, enter all the desired configuration names in quotes, separated by commas.
User Groups The name of the User Groups to assign to the user.
To add the user to multiple groups, enter all the desired group names in quotes, separated by commas.
User Groups Administered The name of the User Groups to grant administrative privileges to the user.
To assign administrative privileges for multiple groups, enter all the desired group names in quotes, separated by commas.
Products Administered The name of the Products to grant administrative privileges to the user.
To assign administrative privileges for multiple products, enter all the desired product names in quotes, separated by commas.

Caution:

The CSV file must have only one row per email+identity type combination.

Resend or revoke invitation

You can resend an invitation to users maybe as a reminder in case some users have not accepted their invitations. You can also revoke invitations that you have sent to users.

Resend or revoke an invitation

  1. In the Admin Console, choose User Management > Users.

  2. Choose Pending Invitations.

  3. Select the users by clicking the check box next to the email address, and do one of the following:

    • Click  to revoke the invitation
    • Click  to resend the invitation

Revoke multiple invitations

The Bulk revoke Invitations functionality allows you to revoke invitations for multiple users in bulk.

For example, your organization moves from Adobe ID to Enterprise or Federated ID. Invitations that you sent to Adobe ID users would need to be revoked.

  1. While you are working on users in the Admin Console, go to the Pending invitations tab.

  2. Click Perform bulk operations ( ) in the upper-right corner and in the drop-down list, choose Bulk revoke invitations.

  3. In the Bulk revoke invitations dialog, download a Sample template of the CSV file that will provide you with the structure of data required. Else (recommended), download the list of all pending invitations.

    bulk-revoke-invitations

    The downloaded file contains the following fields:

    • Email
    • Last Invitation Sent
    • Sent By Email
    • Sent By First Name
    • Sent By Last Name
    • Result
  4. Open the CSV file in Excel and edit the file such that it must contain only rows for the invitations that you want to revoke

  5. Click Yes to confirm the bulk Revoke invitations operation.

After the bulk operation is complete, you will receive an email. You can also view a detailed report of the operation, on the Users > Bulk operations results tab.

Reset password (Enterprise IDs only)

If a user with an Enterprise ID forgets the password, you can initiate the password reset process. When you reset the password, an email is sent to the user with a link to specify a new password.

  1. From the User pane, find the user and open the Account Settings page.
  2. Click Reset User's Password. This feature is only available for Enterprise IDs.
If users with Adobe IDs need help with resetting their passwords, point them to the How to reset Adobe ID password.

Delete users

When you remove a user, all permissions conferred by the organization are revoked. For example, licenses for products are revoked and users are unable to use the products. Access to services is also removed.

Users own and manage their Adobe IDs, so removing a user with the Adobe ID only removes a user from the organization. Users can still access Creative Cloud, and other Adobe services as a free member. Any files or folders stored on Creative Cloud remain available to the user. On the other hand, the organization owns and manages Enterprise and Federated IDs, and when an administrator deletes a user, the ID is deleted permanently. Users lose access to any associated data, and then even administrators cannot access the user's account or data.

Delete or remove users to revoke access to products and services

If the users are part of an organization that you own as a domain owner or trustee:

  1. In the Admin Console, choose User Management > Users.

  2. Choose Active Users.

  3. Select the users by clicking the check box next to the email address, and click .

Note:

If you only want to revoke access to products and services, without deleting any associated data, do not delete the user but remove the user from any product configurations that confer entitlements.

If the users are part of an organization that is a trustee to a domain that you own, see Manage users of trustee organization.

Delete or remove multiple users

You might need to remove a large number of users from the Admin Console. For example, your organization hires other firms on a contract basis and gives them access to products and services in the Admin Console. At the end of the contract you need to remove all these users.

The Bulk remove users functionality allows you to remove multiple users in bulk.

  1. While you are working on users in the Admin Console, go to the Active users or Pending invitations tabs.

  2. Click Perform bulk operations ( ) in the upper-right corner and in the drop-down list, choose Bulk remove users.

  3. In the Bulk remove users dialog, download a Sample template of the CSV file that will provide you with the structure of data required. Else (recommended), download the list of users for the current configuration.

    bulk-remove-users-dialog

    The downloaded file contains the following data:

    • Identity Type
    • Username
    • Domain
    • Email
    • First Name
    • Last Name
    • Country Code
    • Product Configurations
    • Admin Roles
    • Product
    • Configurations Administered
    • User Groups
    • User Groups Administered

    For a description of these fields, see CSV File format.

  4. Open the CSV file in Excel and edit the file such that it must contain only rows for the users that you want to remove.

  5. To upload the updated CSV file, in the Bulk remove users dialog, click Upload and select the updated file in the Browse dialog.

  6. Click Yes to confirm the bulk remove users operation.

After the bulk operation is complete, you will receive an email. You can also view a detailed report of the operation, on the Users > Bulk operations Results page.

Edit multiple user details

You can edit user details such as products, roles, and user attributes of a set of users. For example, your IT Admin imports a large number of new users. As the System Admin, you can then go ahead and update the product provisioning these users in a single bulk update. You can delegate license, support, or deployment administrative privileges to members of the organization in bulk. You can also change the users' group assignment.

  1. While you are working on users in the Admin Console, go to the Active users tab.

  2. Click Perform bulk operations ( ) in the upper-right corner and in the drop-down list, choose Bulk edit users details.

  3. In the Bulk edit user details dialog, download a Sample template of the CSV file that will provide you with the structure of data required. Else (recommended), download the current list of users.

    bulk-edit-user-details-dialog

    The downloaded file contains the following fields:

    • Identity Type
    • Username
    • Domain
    • Email
    • First Name
    • Last Name
    • Country Code
    • Product Configurations
    • Admin Roles
    • Product
    • Configurations Administered
    • User Groups
    • User Groups Administered

    For a description of these fields, see CSV File format.

  4. Open the CSV file in Excel and update the details for the required users.

    The Bulk edit user details functionality allows you to edit the following user details:

    • Product Configurations
    • Product Configurations Administered
    • Admin Roles
    • User Groups
    • User Groups Administered
    • Products Administered
  5. To upload the updated CSV file, in the Bulk edit user details dialog, click Upload and select the updated file in the Browse dialog.

  6. Click Yes to confirm the bulk remove users operation.

After the bulk operation is complete, you will receive an email. You can also view a detailed report of the operation, on the Users > Bulk operations results tab.

Export user data

The Export User data functionality in the Admin Console allows you to export user data to a CSV file. You can export data for users who are currently registered in the Admin Console. You can also export user data for currently pending invitations.

Export user list

As the System administrator, you can download data for users who are currently registered in the Admin Console to a CSV file.

You can then make the required updates to the user data in the CSV file and use the Add multiple users option to upload this user data back to the Admin Console.

The CSV file that you download contains the data as defined in the CSV File format section above.

  1. While you are working on users in the Admin Console, go to the Active users tab.

  2. Click Export user list () in the upper-right corner of the page.

  3. Choose a folder location to download the file and click OK.

The file download procedure will depend on the browser that you are using and the browser-specific settings. You will receive a visual cue when the download is complete.

Note:

There is a bug in the Safari browser that does not provide any visual cue to regarding the download. The file is downloaded in stealth mode with an unknown filename.

If you are using the Safari browser, the following workaround is provided by Adobe:

When you click Data Export, a new browser window opens with the CSV data displayed on the page. You can then right-click and select Save Page to save the file locally.

Export pending invitation list

As the System administrator, you can export data of pending invitations to a CSV. The data downloaded in the CSV is of the same format that you use in the Revoke multiple invitations operation. So you can edit and use this CSV file to revoke multiple invitations.

  1. While you are working on users in the Admin Console, go to the Pending invitations tab.

  2. Click Export pending invitations list () in the upper-right corner of the page.

  3. Choose a folder location to download the file and click OK.

The file download procedure will depend on the browser that you are using and the browser-specific settings. You will receive a visual cue when the download is complete.

Note:

There is a bug in the Safari browser that does not provide any visual cue to regarding the download. The file is downloaded in stealth mode with an unknown filename.

If you are using the Safari browser, the following workaround is provided by Adobe:

When you click Data Export, a new browser window opens with the CSV data displayed on the page. You can then right-click and select Save Page to save the file locally.

Bulk operations results tab

When you run a bulk operation such as adding multiple users or editing multiple user details, at the end of the operation, you will receive an email. In addition, you can view the details of the bulk operation in the Bulk operations results tab.

  1. While you are working on users in the Admin Console, go to the Bulk operation results tab.

  2. In this tab, you can do the following:

    • Click Cancel to stop a currently running bulk operation.
    • After a bulk operation is complete, click View results for a detailed report of the operation.
    • If some of the products specified in the upload file, were purchased under the VIP program, and the licenses for these products have been consumed, these product licenses will not be assigned to the users. For details on the deficit of product licenses, click View deficit report.
    • To delete reports, click the check box to the left of the report names and then click  in the upper-right corner of the User Management pane.

Important: The Import Results page displays reports that are 90 days old or less. Reports that are more than 90 days old are automatically removed, without the interference of a System Admin.

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy