User Guide Cancel

Assign user roles for granular access control

  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin Console overview
      6. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
      3. Deploy Adobe Acrobat 
    3. Deploy Creative Cloud for education
      1. Deployment home
      2. K-12 Onboarding Wizard
      3. Simple setup
      4. Syncing Users
      5. Roster Sync K-12 (US)
      6. Key licensing concepts
      7. Deployment options
      8. Quick tips
      9. Approve Adobe apps in Google Admin Console
      10. Enable Adobe Express in Google Classroom
      11. Integration with Canvas LMS
      12. Integration with Blackboard Learn
      13. Configuring SSO for District Portals and LMSs
      14. Add users through Roster Sync
      15. Kivuto FAQ
      16. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Identity types | Overview
    2. Set up identity | Overview
    3. Set up organization with Enterprise ID
    4. Setup Azure AD federation and sync
      1. Set up SSO with Microsoft via Azure OIDC
      2. Add Azure Sync to your directory
      3. Role sync for Education
      4. Azure Connector FAQ
    5. Set up Google Federation and sync
      1. Set up SSO with Google Federation
      2. Add Google Sync to your directory
      3. Google federation FAQ
    6. Set up organization with Microsoft ADFS
    7. Set up organization for District Portals and LMS
    8. Set up organization with other Identity providers
      1. Create a directory
      2. Verify ownership of a domain
      3. Add domains to directories
    9. SSO common questions and troubleshooting
      1. SSO Common questions
      2. SSO Troubleshooting
      3. Education common questions
    10. Set up Frame.io for enterprise
      1. Adobe Admin Console for Frame.io enterprise users
      2. Automate your setup using Frame.io server-to-server support
  4. Manage your organization setup
    1. Manage existing domains and directories
    2. Enable automatic account creation
    3. Domain Enforcement for restricted authentication
    4. Set up organization via directory trust
    5. Migrate to a new authentication provider 
    6. Asset settings
    7. Authentication settings
    8. Privacy and security contacts
    9. Console settings
    10. Manage encryption  
  5. Manage users
    1. Overview
    2. Manage administrative roles
    3. Manage user roles
    4. User management strategies
      1. Manage users individually   
      2. Manage multiple users (Bulk CSV)
      3. User Sync tool (UST)
      4. Microsoft Azure Sync
      5. Google Federation Sync
    5. Assign licenses to a Teams user
    6. In-app user management for teams
      1. Manage your team in Adobe Express
      2. Manage your team in Adobe Acrobat
    7. Add users with matching email domains
    8. Change user's identity type
    9. Manage user groups
    10. Manage directory users
    11. Manage exception list for domain enforcement
    12. Manage developers
    13. Migrate existing users to the Adobe Admin Console
    14. Migrate user management to the Adobe Admin Console
  6. Manage products and entitlements
    1. Manage products and product profiles
      1. Manage products
      2. Buy products and licenses
      3. Manage product profiles for enterprise users
      4. Manage automatic assignment rules
      5. Entitle users to train Firefly custom models
      6. Review product requests
      7. Manage self-service policies
      8. Manage app integrations
      9. Manage product permissions in the Admin Console  
      10. Enable/disable services for a product profile
      11. Single App | Creative Cloud for enterprise
      12. Optional services
    2. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Manage profiles
      6. Licensing toolkit
      7. Shared Device Licensing FAQ
  7. Get started with Global Admin Console
    1. Adopt global administration
    2. Select your organization
    3. Manage organization hierarchy
    4. Manage product profiles
    5. Manage administrators
    6. Manage user groups
    7. Create license assignment reports
    8. Update organization policies
    9. Manage policy templates
    10. Allocate products to child organizations
    11. Execute pending jobs
    12. Download audit logs and export reports
    13. Export or import organization structure
  8. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Manage projects
    3. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    4. Reclaim assets from a user
    5. Student asset migration | EDU only
      1. Automatic student asset migration
      2. Migrate your assets
  9. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Acrobat Sign
      1. Set up Adobe Acrobat Sign for enterprise or teams
      2. Adobe Acrobat Sign - Team feature Administrator
      3. Manage Adobe Acrobat Sign on the Admin Console
    5. Creative Cloud for enterprise - free membership
      1. Overview
  10. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Manage pre-generated packages
        1. Manage Adobe templates
        2. Manage Single-app packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages using Microsoft Intune
      3. Deploy Adobe packages with SCCM
      4. Deploy Adobe packages with ARD
      5. Install products in the Exceptions folder
      6. Uninstall Creative Cloud products
      7. Use Adobe provisioning toolkit enterprise edition
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Release notes
      2. Use Adobe Remote Update Manager
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
  11. Manage your Teams account
    1. Overview
    2. Update payment details
    3. Manage invoices
    4. Change contract owner
    5. Change your plan
    6. Change reseller
    7. Cancel your plan
    8. Purchase Request compliance
  12. Renewals
    1. Teams membership: Renewals
    2. Enterprise in VIP: Renewals and compliance
  13. Manage contracts
    1. Automated expiration stages for ETLA contracts
    2. Switching contract types within an existing Adobe Admin Console
    3. Value Incentive Plan (VIP) in China
    4. VIP Select help
  14. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  15. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

Applies to enterprise.

Learn to assign access roles to users and user groups in the Admin Console to better control access and permissions.

Assign roles to your users and user groups from the Users > Roles section.

Types of roles

As an Admin, assign user roles to your team members to give them unique access privileges. Available roles and their capabilities are listed below:

Role types

Roles

Capabilities

Member

Automatically assigned to all users in your organization. Admins can manage members' access to comment on shared projects and collaborative workspaces.

Educator

Manages Classrooms and student work in Adobe Express for education. All educators can comment on shared projects and collaborative workflows.

Student

Participates in classroom workflows in Adobe Express and have the same permissions as Members. This role is only applicable via roster sync.

Before you begin

The following conditions make you eligible for assigning user roles:

  • You must be a part of an Enterprise K-12 organization
  • You must be a system administrator
Tip: Creating role-based user groups

Before assigning roles, consider creating or modifying users and groups based on your role assignments. Start with planning your user management strategy.

For example, if you want to assign the educator role to users A, B, and C, then create a user group with users A, B, and C to simplify the assignment.

View roles and role settings

You can review available roles, role settings, and assigned users in the Adobe Admin Console Users section on the left-hand menu. Basic details such as Users assigned, Description, etc., are listed against each role in the Roles page.

Image displays Member screen sharing members is default access for everyone. It also shows Role settings with a toggle to turn commenting access on and off.
You can view role details and additional role settings by selecting the edit icon next to the role.

Select the edit icon   against any role to view more details or modify additional privileges for the role.

  • For example, turn on the Role settings toggle in Member details to give comment access to member role assignees.
  • When commenting is turned off for Members, it will apply to everyone except any roles that have permanent commenting access (for example, Educator roles).

Assign and manage roles

You can view and manage your users' roles based on their required level of access. You can assign roles to users and groups by following the steps:

  1. Open the Adobe Admin Console Users section using your system admin credentials.

  2. In the Users section, select Roles from the left menu.

  3. Select the role you want to assign to the user or user group. For example: Educator. Then, select Add users.

    Alternatively, you can select the Assign users icon   next to your desired role.

  4. Add users or user groups in the Add users to this role screen and select Save.

    Note:

    You can only assign roles to existing users and user groups. To add new users, use your preferred user management technique.

Review user roles

You can review new additions and existing users and user groups listed in the selected role. You can also review and edit role details in the Users or User groups sections in the Adobe Admin Console.

All user role assignment actions are captured in the Audit log report.

More like this

Join the conversation

To collaborate, ask questions, and chat with other administrators, visit our Enterprise and Teams Community.

Get help faster and easier

New user?