Administrative roles

  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
    3. Deploy Creative Cloud for education
      1. Deployment guide
      2. Integration with Canvas LMS
      3. Integration with Blackboard Learn
      4. Configuring SSO for District Portals and LMSs
      5. Kivuto FAQ
      6. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Set up identity
      1. Identity types | overview
      2. Set up organization with Enterprise ID
      3. Set up organization with Federated ID
        1. SSO overview
        2. Setup Azure Connector and sync
          1. Set up SSO with Microsoft via Azure OIDC
          2. Add Azure Sync to your directory
          3. Azure Connector FAQ
        3. Set up Google Federation and sync
          1. Set up SSO with Google Federation
          2. Add Google Sync to your directory
          3. Google federation FAQ
        4. Generic SAML
          1. Set up SSO with other SAML providers
          2. Set up SSO with Microsoft Azure ADFS
          3. SSO Common questions
          4. SSO Troubleshooting
        5. Education SSO
          1. Configure SSO for District Portals and LMS
          2. Common questions
          3. Dovetail
      4. Verify ownership of a domain
      5. Add and manage domains
      6. Link domains to directories
      7. Use directory trust to add pre-claimed domains
      8. Migrate to new authentication provider
    2. Asset settings
    3. Authentication settings
    4. Privacy and security contacts
    5. Console settings
    6. Manage encryption
  4. Manage products and entitlements
    1. Manage users
      1. Overview
      2. Administrative roles
      3. User management techniques
        1. Manage users individually   
        2. Manage multiple users (Bulk CSV)
        3. User Sync tool (UST)
        4. User management API (UMAPI)
        5. Microsoft Azure Sync
        6. Google Federation Sync
      4. Change user's identity type
      5. Manage user groups
      6. Manage directory users
      7. Manage developers
      8. Migrate existing users to the Adobe Admin Console
      9. Migrate user management to the Adobe Admin Console
    2. Manage products and product profiles
      1. Manage products
      2. Manage product profiles for enterprise users
      3. Manage self-service policies
      4. Manage app integrations
      5. Manage product permissions in the Admin Console  
      6. Enable/disable services for a product profile
      7. Single App | Creative Cloud for enterprise
      8. Optional services
    3. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Migrate from Device Licensing
      6. Manage profiles
      7. Licensing toolkit
      8. Shared Device Licensing FAQ
  5. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    3. Reclaim assets from a user
    4. Student asset migration | EDU only
      1. Automatic student asset migration
      2. Migrate your assets
  6. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager 6.x Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Sign
      1. Set up Adobe Sign for enterprise or Teams
      2. Adobe Sign - Team feature Administrator
      3. Manage Adobe Sign on the Admin Console
    5. Creative Cloud for enterprise - free membership
      1. Overview
      2. Getting started
  7. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Adobe templates for packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages with SCCM
      3. Deploy Adobe packages with ARD
      4. Install products in the Exceptions folder
      5. Uninstall Creative Cloud products
      6. Use Adobe provisioning toolkit enterprise edition
      7. Adobe Creative Cloud licensing identifiers
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Use Adobe Remote Update Manager
      2. Channel IDs for use with Adobe Remote Update Manager
      3. Resolve RUM errors
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
      3. Creative Cloud package "Installation Failed" error message
    9. Create packages using Creative Cloud Packager (CC 2018 or earlier apps)
      1. About Creative Cloud Packager
      2. Creative Cloud Packager release notes
      3. Application packaging
      4. Create packages using Creative Cloud Packager
      5. Create named license packages
      6. Create packages with device licenses
      7. Create a license package
      8. Create packages with serial number licenses
      9. Packager automation
      10. Package non-Creative Cloud products
      11. Edit and save configurations
      12. Set locale at system level
  8. Manage your account
    1. Manage your Teams account
      1. Overview
      2. Update payment details
      3. Manage invoices
      4. Change contract owner
    2. Assign licenses to a Teams user
    3. Add products and licenses
    4. Renewals
      1. Teams membership: Renewals
      2. Enterprise in VIP: Renewals and compliance
    5. Purchase Request compliance
    6. Value Incentive Plan (VIP) in China
    7. VIP Select help
  9. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  10. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

Using the Adobe Admin Console, organizations can define a flexible administrative hierarchy that enables fine-grained management of Adobe product access and usage. One or more System admins, provisioned during the enterprise onboarding process, sit at the top of the hierarchy. These System admins can delegate responsibilities to other admins, while still retaining overall control.

Administrative Roles provide the following key benefits to enterprises:

  • Controlled decentralization of administrative responsibilities
  • Quick view of product assignments—by user and by product
  • Functionality to assign quotas to Product admins

Administrative hierarchy

Applies to: Adobe enterprise customers.

The administrative hierarchy can be used to suit the unique requirements of your enterprise. For example, an enterprise can appoint different admins to manage entitlements to Adobe Creative Cloud and Adobe Marketing Cloud offerings. Alternatively, an enterprise can have different admins to manage entitlements of users belonging to different business units.

Megjegyzés:

The administrative hierarchy doesn't apply to teams customers. Teams customers have a single System admin role. The contract owner (previously referred to as Primary admin) is the system administrator with access to the contract details and the billing history. If you are the current contract owner, you can nominate an existing system administrator (previously referred to as secondary admin) as the contract owner.

Administrative Roles in the hierarchy
Admin roles hierarchy

Role

Description

System Admin

Super user for the organization; allowed to perform all administrative tasks in the Admin Console.

Also, has permissions to delegate the following administrative functionality to other users: Product admin, Product Profile admin, User Group admin, Deployment admin, and Support admin.

Product Admin

Administers the products assigned to that admin and all associated administrative functions, which include:

  • Create product profiles
  • Add users and user groups to the organization but not remove these
  • Add or remove users and user groups from product profiles
  • Add or remove Product Profile admins from product profiles
  • Add or remove other product admins from the product
  • Add or remove Group admins from groups

Product Profile Admin

Administers the Product Profile descriptions assigned to that admin and all associated administrative functions, which include:

  • Add users and user groups to the organization but not remove these
  • Add or remove users and user groups from product profiles
  • Assign or revoke product permissions to users and user groups from product profiles
  • Manage product roles of users and user groups for product profiles

User Group Admin

Administers the user group descriptions assigned to that admin and all associated administrative functions, which include:

  • Add or remove users from groups
  • Add or remove User Group admins from groups

Deployment Admin

Creates, manages, and deploys software packages and updates to end users.

Support Admin

Non-administrative role that has access to support-related information, such as customer-reported issue reports.

Storage Admin

Manages the storage administration of the organization. The administrator can view storage consumption of both active and inactive users, delete inactive user-folders and transfer contents to other recipients.

For a detailed list of permissions and privileges for each admin role, see Permissions.

Add an enterprise admin

Applies to: Adobe enterprise customers.

As an admin, you can assign an admin role to other users, giving them the same privileges as you have, or privileges for a role under your admin role in the hierarchy as described above. For example, as a Product admin you can give Product admin privileges or Product Profile admin privileges to a user, but not Deployment admin privileges. For the permissions on the Admin Console, see the Permissions matrix.

  1. In the Admin Console, choose Users > Administrators. The list of existing admins displays.

    Alternatively, go to the relevant Product, Product Profile, or User Group and navigate to the Admins tab.

  2. Click Add Admin. The Add an Administrator screen displays.

  3. Enter a name or email address. You can search for existing users or add a new user by specifying a valid email address, and filling the information on the screen.

  4. Click Next. A list of admin roles appears.

    Megjegyzés:
    • The options on this screen depend on your account and admin role. You can either give the same privileges as you have, or privileges for a role under yours in the hierarchy.
    • As the System Admin of a team, you can assign only one admin role: System Admin.
  5. Select one or more admin roles.

    For Admin types like Product Administrator, Product Profile Administrator, and User Group Administrator, select the specific products, profiles, and groups respectively.

    Megjegyzés:

    For a Product Profile Administrator, you can include profiles for more than one product.

    Add an admin

  6. Review the admin roles assigned to the user and click Save.

The user receives an email notification about the new permissions.

Add a teams admin

Applies to: Adobe teams customers.

As an admin, you can assign the System admin role to other users, giving them the same privileges as you have. If you're the primary admin (contract owner) and you want to make another user the primary admin, follow these steps: Change the contract owner.

  1. In the Admin Console, choose Users > Administrators.

    A list of existing admins displays.

  2. Click Add Admin.

    The Add an Administrator screen displays.

  3. Enter a name or email address. You can search for existing users or add a new user by specifying a valid email address, and filling the information on the screen.

  4. By default, System Administrator is selected. Click Save.

    Add an admin

The user receives an email notification about the new permissions.

Edit enterprise admin role

Applies to: Adobe enterprise customers.

As an admin, you can edit the admin role to other admin that are below you in the Administrative hierarchy. For example, you can remove admin privileges of other admins. Or you can change the admin roles of a Product to a Product Profile admin.

  1. In the Admin Console, choose Users > Administrators. The list of existing admins displays.

    Alternatively, go to the relevant Product, Product Profile, or User Group and navigate to the Admins tab.

  2. Click the name of the admin to edit.

  3. In the User Details, click  for the Administrative Rights section and choose Edit admin rights.

    Administrative Rights section

  4. Edit the administrative rights and save your changes.

Edit teams admin role

Applies to: Adobe teams customers.

As a teams System admin, you can remove the System admin privileges of other admins.

  1. In the Admin Console, choose Users > Administrators.

    The list of existing admins displays.

  2. In the User Details, click  to the right of the Administrative Rights section and choose Edit admin rights.

    Administrative Rights

  3. Edit the administrative rights and save your changes.

Remove an admin

Applies to: Adobe teams enterprise customers.

To revoke admin permissions, select a user and then click Remove Admin.

Revoke admin permissions

Megjegyzés:

Removing an admin does not delete the user from the Admin Console, but only removes the privileges associated with the admin role.

Enterprise admins permissions matrix

Applies to: Adobe enterprise customers.

The following table lists all the permissions for the different types of admins.

Area Permission System admin Product admin Product Profile admin User Group admin Deployment admin Support admin Storage admin
Identity management Add domain (request/claim a domain)            
  View domain and domain listing            
  Manage domain encryption keys            
  Manage default org password policy            
  View default org password policy            
User Management Add user to org        
  Remove user from org            
  View user details and user listing    
  Edit user profile            
  Add Product Profile to user or group ✔² ✔²        
  Remove Product Profile from user ✔² ✔²        
  Add Product Profile to many users ✔² ✔²        
  View product profiles for a user ✔² ✔²        
  View product user listing ✔²          
  Bulk add users to org            
Administrator Management Grant Org Admin to a user            
  Revoke Org Admin from a user            
  Grant Product License Admin to a user ✔² ✔²        
  Revoke Product License Admin from a user ✔² ✔²        
  Grant Deployment Admin to a user          
  Revoke Deployment Admin from a user          
  Grant user group administration to a user          
  Revoke user group administration from a user          
  Grant product owner admin to a user ✔²          
  Revoke product owner admin from a user ✔²          
Product License Configuration Management Grant product entitlement to org              
  Remove product entitlement from org              
  View total number of licenses owned by the organization
✔² ✔²        
  View available products and product families ✔² ✔²        
  Edit product license descriptions/data ✔² ✔²        
  Provision product license to a user ✔² ✔²        
  Deprovision product license from a user ✔² ✔²        
  Add new product license configuration ✔²          
  Edit product license service configuration ✔² ✔²        
  Delete product license service configuration ✔²          
  Remove product access from a user(strip from all configs) ✔²          
Storage Management View Active and Inactive user folders          
  Delete Inactive user folders and transfer content          
  Create shared folders (for Adobe Campaign only)          
  Remove shared folders (for Adobe Campaign only)          
Deployment View/use deployment tab          
Support View support tab      
  Manage support cases          
User Group Management Create user group ✔¹ ✔¹        
  Remove user group     ✔²      
  Add user to user group     ✔²      
  Remove user from user group     ✔²      
  Assign user group to product license ✔² ✔²        
  Remove user group from product license ✔² ✔²        
  View member of user group ✔²    
  View list of user groups  

¹ automatically becomes user group admin for the created user group

² only for owned products, product profiles, or user groups

Adobe logó

Bejelentkezés a fiókba