Predefined user roles

Last updated on Oct 13, 2026

Learn about the predefined user roles available for enterprise organizations in Adobe Admin Console.

Predefined roles give you consistent, built-in access levels to assign across users and groups. You see only the roles available to your organization.

Looking for more granular access control?

Create custom roles to tailor permissions for specific responsibilities and organizational needs.

Organization-wide roles

Roles

Capabilities

Member (default for everyone)

Defines the baseline permissions available to all users in the organization. Assigned automatically to every user by default. Additional roles grant extra permissions.

 

Admin developer

Defines organization-wide permissions for creating and managing projects in Adobe Developer Console. Administrators can control access to Adobe I/O Events data, including Admin Console audit logs and GenAI usage data, through role permissions.

Adobe Express roles

Roles

Capabilities

Adobe Express add-on user

Allows assignees to access all Adobe Express add-ons.

Adobe Express application manager

Allows assignees to customize the Adobe Express user interface for all members of your organization.

Adobe Express template manager

Allows assignees to create and edit templates for your organization and to override template lock restrictions.

Adobe Express social publishing manager

Allows publishing and scheduling content from Adobe Express to social media (Facebook, Instagram, TikTok, LinkedIn, Pinterest, and X).

Adobe Express educator

Allows assignees to manage Classrooms and student work in Adobe Express for education, comment on shared projects and collaborative workflows, view the Adobe Express add-on marketplace, and access all Adobe Express add-ons.

Adobe Firefly roles

Roles

Capabilities

Firefly user

Allows access to commercially safe Adobe Firefly generative AI models.

Partner model user

Allows access to all partner generative AI models.

Adobe Brand Visibility roles

Roles

Capabilities

Adobe Brand Visibility manager

Allows assignees to administer the Adobe Brand Visibility system and manage its users.

Adobe Brand Visibility user

Allows assignees to access read-only Adobe Brand Visibility system data.

Adobe Cloud Drive role

Roles

Capabilities

ACD user

Allows assignees to mount and sync files with Adobe Cloud Drive. Available only to users with a qualifying product entitlement.

AEM Sites Optimizer roles

Roles

Capabilities

ASO manager

Allows assignees read and write access across all sites, including managing the scope tree, assigning capabilities to other users, and viewing the audit log for all scopes.

ASO user

Allows assignees to view opportunities and suggestions across all sites.

Adobe Bridge roles

Roles

Capabilities

Bridge admin

Allows assignees full access to Bridge, including all read and write operations.

Bridge viewer

Allows assignees to access Bridge in read-only mode.

Marketplace assistant

Allows access to the Bridge chat agent for querying sales-related questions.

Governance Agent roles

Roles

Capabilities

Governance Agent manager

Allows assignees to administer Governance Agent checks, including creating and uploading policies.

Governance Agent reader

Allows assignees to view Governance Agent checks and run evaluations.

Enterprise Context roles

Roles

Capabilities

Enterprise Context manager

Allows assignees to administer Enterprise Context, including creating and uploading policies.

Enterprise Context reader

Allows assignees to have read-only access to Enterprise Context.

Adobe Stock roles

Roles

Capabilities

Stock reporting manager

Allows access to Adobe Stock license history and the ability to export CSV reports, if applicable.

 

Firefly Graph roles

Roles

Capabilities

Graph plugin developer

Allows assignees to create and submit plugins for approval and publishing.

Graph plugin reviewer

Allows assignees to create, submit, and approve plugins.

Graph plugin publisher

Allows assignees to create, submit, approve, and publish plugins.

Graph list creator (default for everyone)

Allows assignees to create lists by grouping plugins they already have access to. Lists aren't visible to other users until approved.

Graph list approver

Allows assignees to create and approve lists so they can be shared with other Firefly Graph users.