Sign in to the Admin Console.
Last updated on
|
Also Applies to Creative Cloud for enterprise, Creative Cloud for teams, Document Cloud for enterprise, Experience Cloud
The Admin Console allows you to create, search, update, and remove user accounts. These user accounts entitle the end users in your organization to Adobe products and services.
How to manage users in the Admin Console
This document covers the procedures to manage users individually on the Admin Console. To manage users in bulk, use the CSV Bulk upload methods. Or for Federated ID or Enterprise ID type users, you can automate the user management process using the User Sync tool, or the User Management API.
View user list
The list of users that you add (admins or end users) is available in the Users tab of the Admin Console.
-
-
Navigate to the Users tab.
Note:If there are more than 5000 users in your org, the list of users is not displayed. You can either use the search field to search for a user, or click View Users List to view the complete list.
The list displays the following information:
Name and email of the user.
Account Status:
User identity type Status description Description Applies to Adobe ID Active
User account available for login and license access.
Teams and enterprise Inactive
- User has removed their account.
- User can no longer log in to their account or access provisioned licenses.
Enterprise ID Active
User account available for login and license access.
Enterprise only Disabled
- Admin has removed the account from th Users list but not permanently deleted from the Directory Users list.
- User can no longer log in to their account or access provisioned licenses, but their cloud-stored assets are still available unless permanently deleted from the Directory Users list.
Federated ID Active
- User account available for SSO login and license access.
- If sync is configured, an Active user is in-scope for the automated sync.
Enterprise only Disabled
- User can no longer log in to their account or access provisioned licenses.
- If sync is configured, a Disabled user is removed from sync scope in the organization’s directory, causing the user to no longer have login access to their account or provisioned licenses, but their cloud-stored assets are still available.
- A Disabled user will only appear in the Directory Users list, and a user’s Adobe account can only be permanently deleted from the Directory User list.
Note: With the Azure or Google sync configured, users are managed in a read-only mode via the sync, and the status depends on their status within the organization’s directory.
ID type: The identity type of the user: Adobe ID, Enterprise ID, or Federated ID. For details, see Identity overview.
Products: Product entitlement for end users.
-
Click a user row to display some basic user information such as product entitlements, admin rights.
-
Click the name of the user for more detailed information.
Add users
To set up your organization, you can start with adding users. For Creative Cloud for enterprises, there are three available identity types that you can choose from: Federated ID, Enterprise ID, and Adobe ID. Adobe recommends choosing Enterprise ID or Federated ID to control account and data ownership. Creative Cloud for teams only supports Adobe ID.
-
In the Admin Console, navigate to Users > Users.
-
Click Add User.
-
Enter the email address of the user.
If applicable, the recommended ID Type is populated automatically. You can change it if you need, from the drop-down list.
See the table below to learn more about each identity type.
Identity type
Account ownership
Data ownership
Enterprise features and storage
Enterprise ID
Enterprise
Enterprise
Yes
Federated ID
Enterprise
Enterprise
Yes
Adobe ID
Individual user
Individual user
No
Identity type
Account ownership
Data ownership
Enterprise features and storage
Enterprise ID
Business
Business
YES
Federated ID
Business ID Adobe ID Personal Personal No Note:Adobe is updating your organization's storage to be allocated at the organization level as opposed to the individual level.
-
For an Enterprise ID, select the Country of the user. For a Federated ID, enter an SSO Username and select the Country of the user.
Optionally, enter the First Name and Last Name of the user.
Note:The SSO Username depends on your SSO configuration, and can be either the organization LDAP or organization email address for that user.
-
Select the products or user groups to assign to the user.
The list of products that displays, is based on the purchase plan of your organization. Read about how to manage products and product profiles on the Admin Console.
Note:You can add up to ten users here. To add more, repeat the above steps after saving the changes.
-
Click Save.
The user is added, and displays in the Users list.
Edit user details
As an administrator, you only have access to update details for users who belong to a domain that your organization owns. You cannot update details for users who belong to a domain that your organization trusts but does not own. You can modify the following details for a user:
- Name of the user
- User Groups and Products associated with the user
- Administrative rights
- Country
Note:
- For Federated ID or Enterprise ID type users, user details can be changed using the Admin Console, User Sync tool, or the User Management API. The changes take effect immediately, however, the user is not notified. If you change the email address for a user, inform the user to use the new email address to log in to the Adobe enterprise account.
- For Federated ID type users, changes in the email address affect the user login only if email addresses have been used as the identifier in the SAML handoff between Adobe and the Identity Provider of the organization. If your organization is using email addresses in the handoff, then the change in email addresses has to be done simultaneously on both sides or users will be unable to log in to their enterprise accounts.
-
In the Admin Console, navigate to Users > Users.
-
From the list of users, click the name of a user.
-
To edit the name of the user, click
in the upper-right corner of the User Details section, and select Edit User Profile.
On the Edit User Profile page, edit the user details, and click Save.
-
Similarly, you can edit the products, user groups, and administrative rights associated with the user, clicking
in the upper-right corner of the relevant section.Note:Assigning a user group will also assign the associated product profiles to the user.
Remove users
When you remove a user, all permissions and access to services conferred by the organization are revoked. For example, the licenses for products are revoked and users are unable to use the products.
The organization owns and manages Adobe, Enterprise, and Federated IDs. When an administrator deletes a user, the ID is deleted permanently. Users lose access to any associated data, and then even administrators cannot access the account or data of the user. For example, the URL for a document published online using InDesign cannot be accessed, if the user who published the document is deleted.
If you only want to revoke access to products and services, without deleting any associated data, do not delete the user. Instead, remove the user from any Product Profile that confers entitlements.
Note:
If you inadvertently remove Enterprise ID or Federated ID users from the Admin Console (either individually or in bulk), you can go to the Directory Users list and restore these users.
Adobe ID type users own and manage their IDs, so removing a user with an Adobe ID only removes a user from the organization. Users can still access Creative Cloud, and other Adobe services as a free member. Any files or folders stored on Creative Cloud remain available to the user.
-
In the Admin Console, navigate to Users > Users.
-
From the list of users that displays, select the users clicking the check box to the left of their names.
-
Click Remove Users.
-
If your organization uses Adobe storage for business, you can do one of the following:
- Transfer content now: Folder content is sent through email to a designated user. If you choose this option, specify the email address of the designated user that receives the content.
- Transfer content later: The folder content remains in the Inactive User tab until it is permanently deleted.
- Permanently delete content: The folder is permanently deleted with no option to retrieve the content.
For more information, see reclaim the assets of the deleted user.
Caution:If you’re removing Directory Users (Users > Directory Users) for security reasons, all references to the user’s name and email address are removed. Only a unique alphanumeric ID is retained in the Admin Console. When you reclaim such assets later, it may be difficult to identify deleted users in the Inactive users tab. It is recommended that you use the Transfer content now option.
-
In the Remove Users dialog box that displays, click Remove Users.
The users are removed from the Admin Console, and all permissions and access to services conferred by the organization are revoked.
Sign in to your account