Using the Adobe Admin Console, organizations can define a flexible administrative hierarchy that enables fine-grained management of Adobe product access and usage. One or more System admins, provisioned during the enterprise onboarding process, sit at the top of the hierarchy. These System admins can delegate responsibilities to other admins, while still retaining overall control.

Administrative Roles provide the following key benefits to enterprises:

  • Controlled decentralization of administrative responsibilities
  • Quick view of product assignments—by user and by product
  • Functionality to assign quotas to Product admins

Administrative Roles in the hierarchy

The administrative hierarchy can be used to suit the unique requirements of your enterprise. For example, an enterprise can appoint different admins to manage entitlements to Adobe Creative Cloud and Adobe Marketing Cloud offerings. Alternatively, an enterprise can have different admins to manage entitlements of users belonging to different business units.

Administrative Roles in the hierarchy
Admin roles hierarchy

Note:

Teams accounts only have the System Admin role.

Role Description
System Admin

Super user for the organization; allowed to perform all administrative tasks in the Admin Console.

Also, has permissions to delegate the following administrative functionality to other users: Product admin, Product profile admin, User Group admin, Deployment admin, and Support admin.

Product Admin

Administers the products assigned to that admin and all associated administrative functions. These include:

  • Create product profiles
  • Add users and user groups to the organization but not remove these
  • Add or remove users and user groups from product profiles
  • Add or remove Product Profile admins from product profiles
  • Add or remove other product admins from the product
  • Add or remove Group admins from groups
Product Profile Admin

Administers the product profile descriptions assigned to that admin and all associated administrative functions. These include:

  • Add users and user groups to the organization but not remove these
  • Add or remove users and user groups from product profiles
  • Assign or revoke product permissions to users and user groups from product profiles
  • Manage product roles of users and user groups for product profiles
User Group Admin

Administers the user group descriptions assigned to that admin and all associated administrative functions. These include:

  • Add or remove users from groups
  • Add or remove User Group admins from groups
Deployment Admin Creates, manages, and deploys software packages and updates to end users.
Support Admin Non-administrative role that has access to support-related information, such as customer-reported issue reports.

For a detailed list of permissions and privileges for each admin role, see Permissions.

Add an admin

As an admin, you can assign an admin role to other users, giving them the same privileges as you have, or privileges for a role under your admin role in the hierarchy. For example, as a Product admin you can give Product admin privileges or Product profile admin privileges to a user, but not Deployment admin privileges.

To add or invite an administrator, do the following:

  1. In the Admin Console, choose Users > Administrators. A list of existing admins displays.

    Note:

    Alternatively, go to the details pages for Products, Product Profiles, or User Groups and click the Admins tab. Then click Add Admin.

  2. Click Add Admin. The Add an Admin wizard displays.

  3. In the Basic Information screen, enter a name or email address. You can search for existing users or add new users by specifying a valid email address, and filling the information on the screen.

    add-admin-basic-info
  4. Click Next. The Admin Types screen displays.

    Admin Types

    Note:

    The options on this screen depend on your admin role. You can either give the same privileges as you have, or privileges for a role under yours in the hierarchy.

  5. Select one or more admin roles.

    For Admin types like Product Administrator, Product Profile Administrator, and User Group Administrator, select the specific products, profiles, and groups respectively.

    Note:

    For a Product Profile Administrator, you can include profiles for more than one product.

    Product Profile Administrator
  6. Click Next. The Summary screen displays. Review the admin roles assigned to the user and click Save.

Edit or remove an admin

To remove or edit an administrator, do the following:

  1. In the Admin Console, choose Users > Administrators. A list of existing admins displays.

    Note:

    Alternatively, go to the details pages for Products, Product Profiles, or User Groups and click the Admins tab.

    Click the user name to open the detail view, or click anywhere else in the row to preview the details.

  2. To revoke admin permissions, select a user and then click Remove Admin.

    remove-admin

    Note:

    Removing an admin does not delete the user from the Admin Console, but only removes the privileges associated with the admin role.

Permissions

The following table lists all the permissions for the different types of admins.

Area Permission System admin Product admin Product Profile admin User Group admin Deployment admin Support admin
Identity management Add domain (request/claim a domain) X          
  View domain and domain listing X          
  Manage domain encryption keys X          
  Manage default org password policy X          
  View default org password policy X          
User Management Add user to org X X X      
  Remove user from org X          
  View user details and user listing X X X X X  
  Edit user profile X          
  Add product profile to user or group X      
  Remove product profile from user X      
  Add product profile to many users X      
  View product profiles for a user X      
  View product user listing X        
  Bulk add users X          
Administrator Management Grant Org Admin to a user/user group X          
  Revoke Org Admin from a user/user group X          
  Grant Product License Admin to a user/user group X      
  Revoke Product License Admin from a user/user group X      
  Grant Deployment Admin to a user/user group X       X  
  Revoke Deployment Admin from a user/user group X       X  
  Grant user group administration to a user/user group X     X    
  Revoke user group administration from a user/user group X     X    
  Grant product owner admin to a user X        
  Revoke product owner admin from a user X        
Product License Configuration Management Grant product entitlement to org            
  Remove product entitlement from org            
  View available products and product families X      
  Edit product license descriptions/data X      
  Provision product license to a user X      
  Deprovision product license from a user X      
  Add new product license configuration X        
  Edit product license service configuration X      
  Delete product license service configuration X        
  Remove product access from a user(strip from all configs) X        
Deployment View/use deployment tab X       X  
Support View support tab X X X     X
  Manage support cases X         X
User Group Management Create user group X      
  Remove user group X        
  Add user to user group X        
  Remove user from user group X        
  Assign user group to product license X      
  Remove user group from product license X      
  View member of user group X X X   X
  View list of user groups X X X X X X

¹ automatically becomes user group admin for the created user group

² only for owned products, product profiles, or user groups

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy