Manage administrators

The Global Admin Console also introduces a role, the global administrator, that is distinct from a system administrator and allows to do the following:

• View the global landscape of their total Adobe investment across those Admin Consoles added to the Global Admin Console hierarchy.
• Monitor their Adobe license & resource assignments and usage across multiple Admin Consoles.
• Create Admin Consoles or organizations.
  
• Allocate product licenses from a root or parent Admin Console to child Admin Consoles sitting below within the hierarchy.
• Maintain their current day-to-day operations; the system admins can continue to manage their Admin Consoles. As an example, a global admin can allocate a product to a child Admin Console but not assign it to its users. The system admin will receive the seats within their Admin Console and will assign the products to their users.
• Optionally apply organizational policies to any Admin Consoles in the hierarchy.

Fundamental administrative tasks

The Global Admin Console is designed to work across multiple organizations and Admin Consoles. The following table outlines the different capabilities and where they can be completed—Admin Console or Global Admin Console.

Manage administrators

You can create a flexible administrative hierarchy that enables fine-grained management of Adobe product access and usage. Like in the Adobe Admin Console, the Global Admin Console allows you to add system admins, product admins, product profile admins, user group admins, deployment admins, support admins, and storage admins. These admins can perform their respective administrative tasks in the organizations they are the admin of. Apart from these roles, there are two new roles for the global administration: global admin and global viewer.

Global admin is a transitive role. Making a user the global admin of an organization automatically makes that user a global admin of all children of that organization, directly or indirectly. Also, if a new organization is created in the organization hierarchy, all global admins of any parents of that organization will immediately become global admins of the newly created organization.

The following are the capabilities of the Global Admin role:

Following are the capabilities of the Global Viewer role:

• View the list of user groups, products, product profiles, administrators, policies set, and resources in the organization and in the child organizations.

Distributed administration

By managing administrators, a Global Admin can delegate and distribute the administration of users, product licenses, and groups to admins for each individual organization. The admin added to an organization by a global administrator is given the flexibility to manage the organization without having any visibility into the administration of other orgs. So, the global admin can delegate administration of resources and users keeping the data on those resources and users isolated.

A global admin can create organizations, distribute resources such as products and storage to those organizations, manage identity setup, and create and apply organization policy templates. A system admin added to an organization by a global admin can assign products to users, onboard users, create and manage product profiles, and perform other administrative tasks within that organization.

Add an admin

After the administrator is added, they receive an email message inviting them to accept their role and giving them a link to the Admin Console. If they are added as both a global administrator and some other role, they will receive two invitations, one to the Global Admin console and one to the Admin Console.

Edit an admin

Remove admin rights