In the Adobe Admin Console, go to Users > Roles.
Use the Roles page to view and filter roles by type to audit specific role categories.
Last updated on
Abr 17, 2026
Applies to enterprise.
Learn how system admins can create custom roles to manage access to Adobe Express, Firefly features, and partner model options across their organization.
To begin creating and managing custom roles, go to Users > Roles > Create a role.
What are custom roles and why they matter
Custom roles let you create role variations that match your organization’s access needs. Instead of relying only on predefined roles, you select the capabilities you want and create a role that fits a specific team or workflow. This helps you apply the right level of access without adding unnecessary permissions. With custom roles, you can:
- Grant access to specific partner models rather than all partner models
- Restrict access to selected Adobe Express capabilities
- Provide access to specific Adobe Express add-ons
- Apply tightly scoped permissions for teams with specialized workflows
As a system administrator, you can create a role by selecting any combination of available capabilities. Custom roles also allow you to introduce generative AI capabilities safely and apply only the access their teams require.
-
-
Select Create a role.
-
Enter a unique name for the role and, optionally, add a description.
-
Select a permission set you want this role to control, then choose the permissions to include.
For Adobe Express, Firefly Custom Models, and Partner models, select the permissions you want to include.
For Firefly, select the option to grant access to commercially safe Adobe Firefly generative AI models
- For Adobe Express add-ons, select the add-ons to enable for your organization. Search by entering at least the first three characters of the add-on name, or visit the Express add-ons page to learn and explore available add-ons.
Also, enabling an add-on does not install it for users. Users must install add-ons themselves from Adobe Express.
A role can include any combination of available permissions and capabilities. A role can include any combination of available permissions and capabilities. Note- You only see permission sets and permissions that are available to your organization.
- To grant access to Partner models, you must also grant Firefly access.
-
If the role requires permissions across multiple sets, select the set and choose the required permissions. You can add up to 100 permissions to a role.
-
Review your selected permissions and select Save.
Users don't receive email notifications when roles are assigned or updated. You must communicate any role changes directly.
The custom role appears in the roles list with a Custom role icon to distinguish it from predefined roles. You can assign or edit this role at any time, and the changes are recorded in the audit log.
-
In the Adobe Admin Console, go to Users > Roles.
Use the Roles page to view and filter roles by type to audit specific role categories.
-
Select the Assign users icon next to the role you want to assign to the user or user group.
NoteSystem Admins with access to Adobe Express automatically have access to all Adobe Express add-ons, regardless of any specific role or group settings.
-
Add users or user groups in the Add users to this role screen.
NoteYou can only assign roles to existing users and user groups. To add new users, use your preferred user management technique.
-
Select Save.
Changes apply immediately to all users and groups assigned to this role and are recorded in the audit log.
Users don't receive email notifications when roles are assigned or updated. You must communicate any role changes directly.
-
In the Adobe Admin Console, go to Users > Roles.
-
Select the More Options icon for the relevant role, then choose Edit.
-
Update the Role name and Description if needed.
-
Select Next to review the permissions.
Remove unwanted permissions or select additional permission sets to add new permissions as required.
Add or remove permissions to update the custom role as needed. Add or remove permissions to update the custom role as needed. -
Select Save.
Changes apply immediately to all users and groups assigned to this role and are recorded in the audit log.
Note
A role must be unassigned from all users and user groups before you can delete it.
More like this
Join the conversation
Use our Enterprise and Teams Community to ask questions, collaborate with other admins, and stay informed about new features.
