Applies to: Adobe enterprise customers.
- Adobe Enterprise & Teams: Administration guide
- Plan your deployment
- Basic concepts
- Deployment Guides
- Deploy Creative Cloud for education
- Deployment guide
- Approve Adobe apps in Google Admin Console
- Enable Adobe Express in Google Classroom
- Integration with Canvas LMS
- Integration with Blackboard Learn
- Configuring SSO for District Portals and LMSs
- Deploy Adobe Express through Google App Licensing
- Add users through Roster Sync
- Role sync for Education
- Kivuto FAQ
- Primary and Secondary institution eligibility guidelines
- Set up your organization
- Identity types | Overview
- Set up identity | Overview
- Set up organization with Enterprise ID
- Setup Azure AD federation and sync
- Set up Google Federation and sync
- Set up organization with Microsoft ADFS
- Set up organization for District Portals and LMS
- Set up organization with other Identity providers
- SSO common questions and troubleshooting
- Manage your organization setup
- Manage products and entitlements
- Manage users
- Manage products and product profiles
- Manage products
- Manage product profiles for enterprise users
- Manage automatic assignment rules
- Review product requests
- Manage self-service policies
- Manage app integrations
- Manage product permissions in the Admin Console
- Enable/disable services for a product profile
- Single App | Creative Cloud for enterprise
- Optional services
- Manage Shared Device licenses
- Manage users
- Manage storage and assets
- Storage
- Asset migration
- Reclaim assets from a user
- Student asset migration | EDU only
- Manage services
- Adobe Stock
- Custom fonts
- Adobe Asset Link
- Adobe Acrobat Sign
- Creative Cloud for enterprise - free membership
- Deploy apps and updates
- Overview
- Create packages
- Customize packages
- Deploy Packages
- Manage updates
- Adobe Update Server Setup Tool (AUSST)
- Adobe Remote Update Manager (RUM)
- Troubleshoot
- Create packages using Creative Cloud Packager (CC 2018 or earlier apps)
- About Creative Cloud Packager
- Creative Cloud Packager release notes
- Application packaging
- Create packages using Creative Cloud Packager
- Create named license packages
- Create packages with device licenses
- Create a license package
- Create packages with serial number licenses
- Packager automation
- Package non-Creative Cloud products
- Edit and save configurations
- Set locale at system level
- Manage your account
- Reports & logs
- Get help
Using the Adobe Admin Console, organizations can define a flexible administrative hierarchy that enables fine-grained management of Adobe product access and usage. One or more System admins, provisioned during the enterprise onboarding process, sit at the top of the hierarchy. These System admins can delegate responsibilities to other admins, while still retaining overall control.
Administrative Roles provide the following key benefits to enterprises:
- Controlled decentralization of administrative responsibilities
- Quick view of product assignments—by user and by product
- Functionality to assign quotas to Product admins
Marketo System Admins are now able to assign the Product Support Admin role (PSA) to users in their organization. This will give support access for specific products/instances. Once this role is assigned the user can interact with Adobe support for those products/instances only.

Administrative hierarchy
|
The administrative hierarchy can be used to suit the unique requirements of your enterprise. For example, an enterprise can appoint different admins to manage entitlements to Adobe Creative Cloud and Adobe Marketing Cloud offerings. Alternatively, an enterprise can have different admins to manage entitlements of users belonging to different business units.
The administrative hierarchy doesn't apply to teams customers. Teams customers have a single System admin role. The contract owner (previously referred to as Primary admin) is the system administrator with access to the contract details and the billing history. If you are the current contract owner, you can nominate an existing system administrator (previously referred to as secondary admin) as the contract owner.

Role |
Description |
---|---|
System Admin |
Super user for the organization; allowed to perform all administrative tasks in the Admin Console. Also, has permissions to delegate the following administrative functionality to other users: Product admin, Product Profile admin, Product Support admin, User Group admin, Deployment admin, Support admin, and Storage admin. |
Product Admin |
Administers the products assigned to that admin and all associated administrative functions, which include:
|
Product Profile Admin |
Administers the Product Profile descriptions assigned to that admin and all associated administrative functions, which include:
|
User Group Admin |
Administers the user group descriptions assigned to that admin and all associated administrative functions, which include:
|
Deployment Admin |
Creates, manages, and deploys software packages and updates to end users. |
Support Admin |
Non-administrative role that has access to support-related information, such as customer-reported issue reports. There are two types of Support Admin:
|
Storage Admin |
Manages the storage administration of the organization. The administrator can view storage consumption of both active and inactive users and transfer contents to other recipients. |
For a detailed list of permissions and privileges for each admin role, see Permissions.
Add an enterprise admin
Applies to: Adobe enterprise customers. |
As an admin, you can assign an admin role to other users, giving them the same privileges as you have, or privileges for a role under your admin role in the hierarchy as described above. For example, as a Product admin you can give Product admin privileges or Product Profile admin privileges to a user, but not Deployment admin privileges. For the permissions on the Admin Console, see the Permissions matrix.
-
In the Admin Console, choose Users > Administrators.
Alternatively, go to the relevant Product, Product Profile, or User Group and navigate to the Admins tab.
-
Click Add Admin.
-
Enter a name or email address. You can search for existing users or add a new user by specifying a valid email address, and filling the information on the screen.
Pastaba:As a User Group, Deployment, Support, or Storage Administrator, you can't add new users to the organization. You must enter a valid name or email address of an existing user.
-
Click Next. A list of admin roles appears.
- The options on this screen depend on your account and admin role. You can either give the same privileges as you have, or privileges for a role under yours in the hierarchy.
- As the System Admin of a team, you can assign only one admin role: System Admin.
-
Select one or more admin roles.
For Admin types like Product Administrator, Product Profile Administrator, and User Group Administrator, select the specific products, profiles, and groups respectively.
Pastaba:For a Product Profile Administrator, you can include profiles for more than one product.
-
Review the admin roles assigned to the user and click Save.
The user receives an email invitation regarding the new administrative privileges from message@adobe.com.
Users must select Get started in the email to join the organization. If new admins don't use the Get started link in the email invitation, they cannot sign in to the Admin Console.
As part of the sign-in process, users may be asked to set up an Adobe profile if they do not have one already. If users have multiple profiles associated with their email address, users must choose “Join Team” (if prompted) and then select the profile associated with the new organization.

Add a teams admin
Applies to: Adobe teams customers. |
As an admin, you can assign the System admin role to other users, giving them the same privileges as you have. If you're the primary admin (contract owner) and you want to make another user the primary admin, follow these steps: Change the contract owner.
-
In the Admin Console, choose Users > Administrators.
A list of existing admins displays.
-
Click Add Admin.
The Add an Administrator screen displays.
-
Enter a name or email address. You can search for existing users or add a new user by specifying a valid email address, and filling the information on the screen.
-
By default, System Administrator is selected. Click Save.
Users must select Get started in the email invitation to join the organization.
As part of the sign-in process, users may be asked to set up an Adobe profile if they don't have one already. If users have multiple profiles associated with their email address, users must choose Join Team (if prompted) and then select the profile associated with the new organization.

Edit enterprise admin role
Applies to: Adobe enterprise customers. |
As an admin, you can edit the admin role to other admin that are below you in the Administrative hierarchy. For example, you can remove admin privileges of other admins. Or you can change the admin roles of a Product to a Product Profile admin.
-
In the Admin Console, choose Users > Administrators. The list of existing admins displays.
Alternatively, go to the relevant Product, Product Profile, or User Group and navigate to the Admins tab.
-
Click the name of the admin to edit.
-
In the User Details, click
for the Administrative Rights section and choose Edit admin rights.
-
Edit the administrative rights and save your changes.
Edit teams admin role
Applies to: Adobe teams customers. |
As a teams System admin, you can remove the System admin privileges of other admins.
-
In the Admin Console, choose Users > Administrators.
The list of existing admins displays.
-
In the User Details, click
to the right of the Administrative Rights section and choose Edit admin rights.
-
Edit the administrative rights and save your changes.
Remove an admin
Applies to: Adobe teams enterprise customers. |
To revoke admin permissions, select a user and then click Remove Admin.

Removing an admin does not delete the user from the Admin Console, but only removes the privileges associated with the admin role.
Enterprise admins permissions matrix
Applies to: Adobe enterprise customers. |
The following table lists all the permissions for the different types of admins, categorized by the following areas of functionality:
Permission |
System admin |
Product admin |
Product Profile admin |
User Group admin |
Deployment admin |
Support admin |
Storage admin |
Add domain (request/claim a domain) |
✔ |
||||||
View domain and domain listing |
✔ |
||||||
Manage domain encryption keys |
✔ |
||||||
Manage default org password policy |
✔ |
||||||
View default org password policy |
✔ |
Permission |
System admin |
Product admin |
Product Profile admin |
User Group admin |
Deployment admin |
Support admin |
Storage admin |
Add user to org |
✔ |
✔ |
✔ |
||||
Remove user from org |
✔ |
||||||
View user details and listing |
✔ |
✔ |
✔ |
✔ |
|||
Edit user profile |
✔ |
||||||
Add Product Profile to user or group |
✔ |
✔2 |
✔2 |
||||
Remove Product Profile from user |
✔ |
✔2 |
✔2 |
||||
Add Product Profile to multiple users |
✔ |
✔2 |
✔2 |
||||
View product profiles for a user |
✔ |
✔2 |
✔2 |
||||
View product user listing |
✔ |
✔2 |
|||||
Bulk add users to org |
✔ |
² only for owned products, product profiles, or user groups
Permission |
System admin |
Product admin |
Product Profile admin |
User Group admin |
Deployment admin |
Support admin |
Storage admin |
Grant Org Admin to a user |
✔ |
||||||
Revoke Org Admin from a user |
✔ |
||||||
Grant Product License Admin to a user |
✔ |
✔2 |
✔2 |
||||
Revoke Product License Admin from a user |
✔ |
✔2 |
✔2 |
||||
Grant Deployment Admin to a user |
✔ |
✔ |
|||||
Revoke Deployment Admin from a user |
✔ |
✔ |
|||||
Grant user group admin to a user |
✔ |
✔ |
|||||
Revoke user group admin from a user |
✔ |
✔ |
|||||
Grant product owner admin to a user |
✔ |
✔2 |
|||||
Revoke product owner admin from a user |
✔ |
✔2 |
² only for owned products, product profiles, or user groups
Permission |
System admin |
Product admin |
Product Profile admin |
User Group admin |
Deployment admin |
Support admin |
Storage admin |
Grant product entitlement to org |
|||||||
Remove product entitlement from org |
|||||||
View total number of licenses owned by the org |
✔ |
✔2 |
✔2 |
||||
View available products and product families |
✔ |
✔2 |
✔2 |
||||
Edit product license descriptions/data |
✔ |
✔2 |
✔2 |
||||
Provision product license to a user |
✔ |
✔2 |
✔2 |
||||
Deprovision product license from a user |
✔ |
✔2 |
✔2 |
||||
Add new product license configuration |
✔ |
✔2 |
|||||
Edit product license service configuration |
✔ |
✔2 |
✔2 |
||||
Delete product license service configuration |
✔ |
✔2 |
|||||
Remove product access from a user (strip from all configs) |
✔ |
✔2 |
² only for owned products, product profiles, or user groups
Permission |
System admin |
Product admin |
Product Profile admin |
User Group admin |
Deployment admin |
Support admin |
Storage admin |
View / use Storage tab |
✔ |
✔ |
|||||
View Active and Inactive user folders |
✔ |
✔ |
|||||
Delete Inactive user folders and transfer content |
✔ |
✔ |
Permission |
System admin |
Product admin |
Product Profile admin |
User Group admin |
Deployment admin |
Support admin |
Storage admin |
View / use Insights tab |
✔ |
||||||
View/use dashboard |
✔ |
||||||
View / create reports |
✔ |
||||||
View audit logs |
✔ |
Permission |
System admin |
Product admin |
Product Profile admin |
User Group admin |
Deployment admin |
Support admin |
Storage admin |
View/use Packages tab |
✔ |
✔ |
Permission |
System admin |
Product admin |
Product Profile admin |
User Group admin |
Deployment admin |
Support admin |
Storage admin |
View support tab |
✔ |
✔ |
✔ |
✔ |
|||
Manage support cases |
✔ |
✔ |
Permission |
System admin |
Product admin |
Product Profile admin |
User Group admin |
Deployment admin |
Support admin |
Storage admin |
Create user group |
✔ |
✔1 |
✔1 |
||||
Remove user group |
✔ |
||||||
Add user to user group |
✔ |
✔2 |
|||||
Remove user from user group |
✔ |
✔2 |
|||||
Assign user group to product license |
✔ |
✔2 |
✔2 |
||||
Remove user group from product license |
✔ |
✔2 |
✔2 |
||||
View member of user group |
✔ |
✔ |
✔ |
✔2 |
✔ |
||
View list of user groups |
✔ |
✔ |
✔ |
✔2 |
✔ |
Prisijunkite prie savo paskyros