In the Adobe Admin Console, go to Users > Roles.
Use the Roles page to view and filter roles by type to audit specific role categories.
Last updated on
Mar 9, 2026
Applies to enterprise.
Learn how system admins can create custom roles to manage access to Adobe Express, Firefly features, and partner model options across their organization.
To begin creating and managing custom roles, go to Users > Roles > Create a role.
What are custom roles and why they matter
Custom roles let you create role variations that match your organization’s access needs. Instead of relying only on predefined roles, you select the capabilities you want and create a role that fits a specific team or workflow. This helps you apply the right level of access without adding unnecessary permissions. With custom roles, you can:
- Assign different capabilities to different users or groups
- Support unique configurations for Express, Firefly, and partner model access
- Adjust access quickly as projects or requirements change
- Keep permissions aligned with your internal workflows
As a system administrator, you can create a role by selecting any combination of available capabilities. Custom roles also allow you to introduce generative AI capabilities safely and apply only the access their teams require.
-
-
Select Create a role.
-
Enter a unique name for the role and, optionally, add a description.
-
Select a permission set you want this role to control, then choose the permissions to include.
A role can include any combination of available permissions and capabilities. A role can include any combination of available permissions and capabilities. Note- You only see permission sets and permissions that are available to your organization.
- To grant access to Partner models, you must also grant Firefly access.
-
If the role requires permissions across multiple sets, select the set and choose the required permissions.
NoteYou can add up to 100 permissions to a role.
-
Review your selected permissions and select Save.
NoteUsers don't receive email notifications when roles are assigned or updated. You must communicate any role changes directly.
The custom role appears in the roles list with a Custom role icon to distinguish it from predefined roles. You can assign or edit this role at any time, and the changes are recorded in the audit log.
-
In the Adobe Admin Console, go to Users > Roles.
Use the Roles page to view and filter roles by type to audit specific role categories.
-
Select the Assign users icon next to the role you want to assign to the user or user group.
-
Add users or user groups in the Add users to this role screen.
NoteYou can only assign roles to existing users and user groups. To add new users, use your preferred user management technique.
-
Select Save.
Changes apply immediately to all users and groups assigned to this role and are recorded in the audit log.
NoteUsers don't receive email notifications when roles are assigned or updated. You must communicate any role changes directly.
-
In the Adobe Admin Console, go to Users > Roles.
-
Select the More Options icon for the relevant role, then choose Edit.
-
Update the Role name and Description if needed.
-
Select Next to review the permissions.
Remove unwanted permissions or select additional permission sets to add new permissions as required.
Add or remove permissions to update the custom role as needed. Add or remove permissions to update the custom role as needed. -
Select Save.
Changes apply immediately to all users and groups assigned to this role and are recorded in the audit log.
Note
A role must be unassigned from all users and user groups before you can delete it.
More like this
Join the conversation
Use our Enterprise and Teams Community to ask questions, collaborate with other admins, and stay informed about new features.
