The Admin Console allows you to create, search, update, and remove user accounts. These user accounts entitle the end users in your organization to Adobe products and services.

Add users

To set up your organization, you can start with adding users. For Creative Cloud for enterprises, there are three available identity types that you can choose from: Federated ID, Enterprise ID, and Adobe ID. Adobe recommends choosing Enterprise ID or Federated ID to control account and data ownership. Creative Cloud for teams only supports Adobe ID.

Individual user

  1. In the Admin Console, navigate to Users > Users.

  2. Click Add User.

  3. Enter the email address of the user and select an identity type from the drop-down list.

    See the table below to learn more about each identity type.

    Identity type

    Account ownership

    Data ownership

    Enterprise features and storage

    Enterprise ID

    Enterprise

    Enterprise

    Yes

    Federated ID

    Enterprise

    Enterprise

    Yes

    Adobe ID Individual user Individual user No

    Note:

    Adobe strongly recommends enterprises to minimize the number of Adobe IDs in their organization. Enterprise organizations should be assigning Creative Cloud seats to Enterprise ID and Federated ID accounts. Adobe is updating your organization's storage to be allocated at the organization level as opposed to the individual level. In this case, you cannot assign Creative Cloud seats to Adobe ID accounts.

    However, if your organization has non-Creative Cloud products, such as Acrobat DC, you can add any type of users to these products.

  4. For an Enterprise ID, select the Country of the user. For a Federated ID, enter an SSO Username and select the Country of the user.

    Optionally, enter the First Name and Last Name of the user.

    Note:

    The SSO Username depends on your SSO configuration, and can be either the organization LDAP or organization email address for that user.

  5. To assign products to the user, navigate to Assign Products.

    The list of products that displays, is based on the purchase plan of your organization.

  6. For enterprise accounts, click a product and select a profile for the product. For teams accounts, select the product to assign to the user.

    For details on products and profiles, see Manage products and profiles.

  7. To add the user to a user group, navigate to Assign User Groups, and select the user groups. The products associated with the selected user groups are assigned to the user.

  8. Click Save.

    The user is added, and displays in the Users list.

If you assign an admin role or a product profile to users, they receive an email notification. Users must follow the link to complete their profile, if prompted.

Multiple users

You can add multiple users to your organization and provision them to product profiles at the same time by uploading a comma-separated list. You can download a sample CSV file from the Import Users dialog and then fill the details and upload the file. You can import up to 5,000 users at a time.

Note:

This feature does not support user names having special characters, such as the comma (,) and the semicolon (;).

To add multiple users in bulk:

  1. While working on users in the Admin Console, click  in the upper-right corner of the Users page.

    Note:

    You cannot use this bulk upload procedure to upload multiple users from within the Users tab of the Products page in the Admin Console. For more information, see Manage products and product profiles.

  2. Choose Add Users by CSV from the drop-down list.

  3. In the Add Users by CSV dialog box, click Download CSV Template, and choose either Current user list (recommended) or Standard template.

    Add users by CSV

    For a description of the fields in the downloaded file, see CSV File format.

  4. Update the downloaded CSV file with the data of users that you want to add to the profile.

  5. Drag the updated CSV on to the Add Users by CSV dialog box and click Upload.

    Note:

    You can upload a CSV file size of up to 10 MB.

    After the bulk operation is complete, you will receive an email. You can also view a detailed report of the operation via Bulk Operation Results.

For troubleshooting tips for bulk uploading to the Admin Console, see Troubleshoot bulk user upload.

CSV file format

The template file that you download, contains sample data that you can use as a guide.

Field Name Description

Applies to

(Enterprise or Teams accounts)

Required/Optional for identity types 
Identity Type

Enter the type of user to add.

These values control the ID type assigned to the user. Not case sensitive. The ID type must be valid for the domain.

Valid values:

  • Federated ID
  • Enterprise ID
  • Adobe ID
Enterprise only  
Username

Restricted to ASCII.

User name as it corresponds to the respective user ID.

For Adobe ID type users, the user name that is defined for the Adobe ID of the user.

Only used in Enterprise administered domains. Account name to be used for this user. Restrictions to an email address and same email address can be imposed by the domain owner. 

Maximum length is 255 characters.

Enterprise only Mandatory for Federated ID.
Domain

Domain as it corresponds to the Enterprise or Federated ID.

 

Enterprise only Mandatory if identity type is Federated ID.
Email

Valid email address.

60 character maximum.

A name and domain. If identity type is Enterprise ID or Federated ID, the domain must be claimed and activated by the organization. The user name determines the account name. 

For other account types, it is the email address used for the user and account name. 

See RFC 2822 sec 3.4.1

All Required for all identity types - Enterprise ID, Federated ID, and Adobe ID.
First Name

First Name of the user.

Restricted to ASCII 

For Adobe ID type users, the first name that is defined for the Adobe ID of the user.

Maximum length is 255 characters.

 

All Mandatory if identity type is Enterprise ID or Federated ID.
Last Name

Last name of the user.

Restricted to ASCII 

For Adobe ID type users, the last name that is defined for the Adobe ID of the user.

Maximum length is 255 characters.

 

All Mandatory if identity type is Enterprise ID or Federated ID.
Country Code

A two-letter country code (for example, United States = "US").

For Adobe ID type users, enter the country code that is defined for the Adobe ID of the user.

If present, check to ensure that the user is from a country where Adobe does the business. It is present for Enterprise administered accounts.

To determine the Country Code, see https://www.iso.org/obp/ui/#home.

For more information, see ISO 3166-1 alpha-2 Country Codes

All Mandatory for  Federated ID.
Product Configurations

The names of the Product Profiles to assign to the user.

The product profiles nickname to which you want to assign the user. To assign the user to multiple product profiles, enter all the desired Product Profiles in quotes, separated by commas.

For example, "Audience Management: Audience Manager - Default Access, the Custom plan only - Custom plan - Design"

Enterprise only Mandatory for Enterprise ID and Federated ID.
Team Products

The names of the Team Products to assign to the user.

To assign the user to multiple team products, enter all the desired product names in quotes, separated by commas.

For example, "Audience Management: Audience Manager - Default Access, the Custom plan only - Custom plan - Design"

Note: Enter the team products in the Product Configurations field and change the name of the field to Team Products.

Teams only  
Admin Roles

Administrative role to assign to the user.

Valid values:

  • System
  • Deployment
  • Support
All  
Product
Configurations Administered

The names of the Product Profiles to grant administrative privileges to the user.

To assign administrative privileges for multiple product profiles, enter all the desired profile names in quotes, separated by commas.

Enterprise only Optional
User Groups

The names of the User Groups to add the user.

To add the user to multiple groups, enter all the desired group names in quotes, separated by commas.

All Optional
User Groups Administered

The names of the User Groups to grant administrative privileges to the user.

To assign administrative privileges for multiple groups, enter all the desired group names in quotes, separated by commas.

All Optional
Products Administered

The names of the Products to grant administrative privileges to the user.

To assign administrative privileges for multiple products, enter all the desired product names in quotes, separated by commas.

Enterprise only

Optional
Developer Access

(For developers only)

The names of the Product Profiles of products that include API access to which the developers are added.

For details regarding developers, see Add multiple developers (in bulk) section in this document.

Enterprise only
Optional

Caution:

The CSV file must have only one row per email+identity type combination.

Edit user details

As an administrator, you only have access to update details for users who belong to a domain that your organization owns. You cannot update details for users who belong to a domain that your organization trusts but does not own. You can modify the following details for a user:

  • Name of the user
  • User Groups and Products associated with the user
  • Administrative rights

Note:

  • For Federated ID or Enterprise ID type users, user details can be changed using the Admin ConsoleUser Sync tool, or the User Management API. The changes take effect immediately, however, the user is not notified. If you change the email address for a user, inform the user to use the new email address to log in to the Adobe enterprise account.
  • For Federated ID type users, changes in the email address affect the user login only if email addresses have been used as the identifier in the SAML handoff between Adobe and the Identity Provider of the organization. If your organization is using email addresses in the handoff, then the change in email addresses has to be done simultaneously on both sides or users will be unable to log in to their enterprise accounts.

Individual users

  1. In the Admin Console, navigate to Users Users.

  2. From the list of users, click the name of a user.

  3.  To edit the name of the user, click  in the upper-right corner of the User Details section, and select Edit User Profile.

    Edit user profile

    On the Edit User Profile page, edit the user details, and click Save.

  4. Similarly, you can edit the products, user groups, and administrative rights associated with the user, clicking  in the upper-right corner of the relevant section.

    Note:

    Assigning a user group will also assign the associated product profiles to the user.

Multiple users

You can edit user details such as products, roles, and user attributes of a set of users. For example, your IT Administrator imports many new users. As the System Administrator, you can update the product provisioning for the users in a single bulk update. You can delegate license, support, or deployment administrative privileges to members of the organization in bulk. You can also change the user groups assigned to the users.

For troubleshooting tips for bulk uploading to the Admin Console, see Troubleshoot bulk user upload.

  1. While working on users in the Admin Console, click  in the upper-right corner of the Users page.

  2. Choose Edit User Details by CSV from the drop-down list.

  3. In the Edit Users by CSV dialog box, click Download CSV Template, and choose either Current user list (recommended) or Standard template.

    Edit Users by CSV

    For a description of the fields in the downloaded file, see CSV File format.

  4. Update the user details in the downloaded CSV file.

    The Bulk edit user details functionality allows you to edit the following user details:

    • Product Profiles
    • Product Profiles Administered
    • Admin Roles
    • User Groups
    • User Groups Administered
    • Products Administered
  5. Drag the updated CSV on to the Edit Users by CSV dialog box and click Upload.

    After the bulk operation is complete, you will receive an email. You can also view a detailed report of the operation via Bulk Operation Results.

Directory users

If you have set up 

Remove users

When you remove a user, all permissions and access to services conferred by the organization are revoked. For example, the licenses for products are revoked and users are unable to use the products.

Adobe ID type users own and manage their IDs, so removing a user with an Adobe ID only removes a user from the organization. Users can still access Creative Cloud, and other Adobe services as a free member. Any files or folders stored on Creative Cloud remain available to the user.

On the other hand, the organization owns and manages Federated and Enterprise IDs. When an administrator deletes a user, the ID is deleted permanently. Users lose access to any associated data, and then even administrators cannot access the account or data of the user. For example, the URL for a document published online using InDesign cannot be accessed, if the user who published the document is deleted. For this simple reason, Adobe recommends Admins to add users only with Federated and Enterprise IDs.

If you only want to revoke access to products and services, without deleting any associated data, do not delete the user. Instead, remove the user from any product profile that confers entitlements.

Individual users

To remove users who are part of an organization that you own as a domain owner or trustee, do the following.

  1. In the Admin Console, navigate to Users Users.

  2. From the list of users that displays, select the users clicking the check box to the left of their names.

  3. Click Remove Users.

  4. If your organization uses Adobe storage for business, you can do one of the following:

    • Transfer content now: Folder content is sent through email to a designated user. If you choose this option, specify the email address of the designated user that receives the content.
    • Transfer content later: The folder content remains in the Inactive User tab until it is permanently deleted.
    • Permanently delete content: The folder is permanently deleted with no option to retrieve the content.

    For more information, see reclaim the assets of the deleted user.

    Caution:

    If you’re removing Directory Users (Users > Directory Users) for security reasons, all references to the user’s name and email address are removed. Only a unique alphanumeric ID is retained in the Admin Console. When you reclaim such assets later, it may be difficult to identify deleted users in the Inactive users tab. It is recommended that you use the Transfer content now option. 

  5. In the Remove Users dialog box that displays, click Remove Users.

    The users are removed from the Admin Console, and all permissions and access to services conferred by the organization are revoked.

Multiple users

You can remove multiple users from the Admin Console. For example, your organization hires other firms on a contract basis and gives them access to products and services in the Admin Console. At the end of the contract, you must remove all these users.

To remove multiple users in bulk:

  1. While working on users in the Admin Console, click  in the upper-right corner of the Users page.

  2. Choose Remove Users by CSV from the drop-down list.

  3. In the Remove Users by CSV dialog box, click Download CSV Template, and choose either Current user list (recommended) or Standard template.

    Remove users by CSV

    For the description of fields in the downloaded file, see CSV File format.

  4. Open the CSV file in Excel and edit the file such that it contains only rows for the users that you want to remove.

    Note:

    If your organization uses Adobe storage for business, specify the transfer options in the CSV file for each user. If these options are not specified, the default option Transfer content later is used.

  5. Drag the updated CSV on the Remove Users by CSV dialog box and click Upload.

    After the bulk operation is complete, you receive an email notification. You can also view a detailed report of the operation via Bulk Operation Results.

Export data

User data

As the System administrator, you can download data for users who are currently registered in the Admin Console to a CSV file. You can then make the required updates to the user data in the CSV file and upload the CSV file back to the Admin Console. For more details, see edit multiple users.

The CSV file that you download contains the data as defined in the CSV File format section above.

To download the user data, navigate to Users > Users in the Admin Console. Click  in the upper-right corner of the Users page, and choose Export users list to CSV.

The file download procedure depends on the browser that you are using and the browser-specific settings. You receive a visual cue when the download is complete.

License deficit report

If you have purchased Enterprise products in VIP, you can download a report license deficit report (in .csv format). For each product that you have purchased, if you have assigned more users to the product than the number of available licenses, this report displays the shortfall of licenses.

To download the user data, navigate to Users > Users in the Admin Console. Click  in the upper-right corner of the Users page, and choose License Deficit Report.

The file download procedure depends on the browser that you are using and the browser-specific settings. You receive a visual cue when the download is complete.

Note:

If you are an ETLA customer, this report doesn't display any data. Also, if your organization has purchased Experience Cloud products on the Admin Console, license deficit data is not reported.

License status report

If you have purchased Enterprise products in VIP, you can download a report license status report (.csv format). For each user, this report displays if products are delegated to that user and if the user is provisioned a license.

Note:

Product Delegated: A product is said to be delegated if a user has been assigned the product.

Product Provisioned: A product is said to be provisioned to a user if the user has the privilege to use the product. In other words, a license is available for the product.

If you are an ETLA customer, this report displays Yes for both the Product Delegated and Product Provision fields. This is irrespective of the licenses you have allocated to the users for a product.

See the Overview tab on the Admin Console to compare the statuses of licenses delegated and licenses provisioned for each product that your organization has purchased.

To download the user data, navigate to Users > Users in the Admin Console. Click  in the upper-right corner of the Users page, and choose License Status Report.

The file download procedure depends on the browser that you are using and the browser-specific settings. You receive a visual cue when the download is complete.

Bulk Operation Results

After you perform a bulk operation, like adding or editing multiple users, you receive an email with the details of the operation. In addition, you can view these details on the Bulk Operation Results page.

Note:

If a bulk operation is not displaying in the results page, refresh your browser page so it shows the latest results.

  1. Navigate to Users > Users in the Admin Console, and click  in the upper-right corner of the Users page.

  2. In the drop-down list, choose Bulk Operation Results.

    The Bulk Operation Results page displays.

  3. To view the details of an operation, click the name of the operation.

    Note:

    If some of the products specified in the upload file, were purchased under the VIP program, and the licenses for these products have been consumed, these product licenses will not be assigned to the users. For details on the deficit of product licenses, click View deficit report.

  4. To download the results as a CSV file, click Download Results.

  5. To remove a result, click the check box to the left of the operation name and click Remove Result.

    You can also clear all the bulk operation results clicking Clear All Results.

Note:

The Bulk Operation Results page displays reports that are 90 days old or less. Reports that are more than 90 days old are automatically removed.

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy