User Guide Cancel

Assign user roles for granular access control

Search
Enterprise

Enterprise

Admin Console
  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin Console overview
      6. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
      3. Deploy Adobe Acrobat 
    3. Deploy Creative Cloud for education
      1. Deployment home
      2. K-12 Onboarding Wizard
      3. Simple setup
      4. Syncing Users
      5. Roster Sync K-12 (US)
      6. Key licensing concepts
      7. Deployment options
      8. Quick tips
      9. Approve Adobe apps in Google Admin Console
      10. Enable Adobe Express in Google Classroom
      11. Integration with Canvas LMS
      12. Integration with Blackboard Learn
      13. Configuring SSO for District Portals and LMSs
      14. Add users through Roster Sync
      15. Kivuto FAQ
      16. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Identity types | Overview
    2. Set up identity | Overview
    3. Set up organization with Enterprise ID
    4. Setup Azure AD federation and sync
      1. Set up SSO with Microsoft via Azure OIDC
      2. Add Azure Sync to your directory
      3. Role sync for Education
      4. Azure Connector FAQ
    5. Set up Google Federation and sync
      1. Set up SSO with Google Federation
      2. Add Google Sync to your directory
      3. Google federation FAQ
    6. Set up organization with Microsoft ADFS
    7. Set up organization for District Portals and LMS
    8. Set up organization with other Identity providers
      1. Create a directory
      2. Verify ownership of a domain
      3. Add domains to directories
    9. SSO common questions and troubleshooting
      1. SSO Common questions
      2. SSO Troubleshooting
      3. Education common questions
    10. Set up Frame.io for enterprise
      1. Adobe Admin Console for Frame.io enterprise users
      2. Manage Frame.io account roles
      3. Automate your setup using Frame.io server-to-server support
  4. Manage your organization setup
    1. Manage existing domains and directories
    2. Enable automatic account creation
    3. Domain Enforcement for restricted authentication
    4. Set up organization via directory trust
    5. Migrate to a new authentication provider 
    6. Asset settings
    7. Authentication settings
    8. IP-based access control
    9. Privacy and security contacts
    10. Console settings
    11. Manage encryption  
  5. Manage users
    1. Overview
    2. Manage administrative roles
    3. Manage user roles
    4. Manage Frame.io account roles
    5. User management strategies
      1. Manage users individually   
      2. Manage multiple users (Bulk CSV)
      3. User Sync tool (UST)
      4. Microsoft Azure Sync
      5. Google Federation Sync
    6. Assign licenses to a Teams user
    7. Manage your team in Creative Cloud desktop app
    8. Add users with matching email domains
    9. Change user's identity type
    10. Manage user groups
    11. Manage directory users
    12. Manage exception list for domain enforcement
    13. Manage developers
    14. Migrate existing users to the Admin Console
    15. Migrate user management to the Admin Console
    16. Migrate Frame.io user management to the Admin Console
  6. Manage products and entitlements
    1. Manage products and product profiles
      1. Manage products
      2. Buy products and licenses
      3. Manage product profiles for enterprise users
      4. Manage automatic assignment rules
      5. Entitle users to train Firefly custom models
      6. Review product requests
      7. Manage self-service policies
      8. Manage app integrations
      9. Manage product permissions in the Admin Console  
      10. Enable/disable services for a product profile
      11. Single App | Creative Cloud for enterprise
      12. Optional services
    2. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Manage profiles
      6. Licensing toolkit
      7. Shared Device Licensing FAQ
  7. Get started with Global Admin Console
    1. Adopt global administration
    2. Select your organization
    3. Manage organization hierarchy
    4. Manage product profiles
    5. Manage administrators
    6. Manage user groups
    7. Create license assignment reports
    8. Update organization policies
    9. Manage policy templates
    10. Allocate products to child organizations
    11. Execute pending jobs
    12. Download audit logs and export reports
    13. Export or import organization structure
  8. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Manage projects
    3. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    4. Reclaim assets from a user
    5. Student asset migration | EDU only
      1. Student File Transfer admin guide
      2. Student File Transfer FAQ
  9. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Acrobat Sign
      1. Set up Adobe Acrobat Sign for enterprise or teams
      2. Adobe Acrobat Sign - Team feature Administrator
      3. Manage Adobe Acrobat Sign on the Admin Console
  10. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Manage pre-generated packages
        1. Manage Adobe templates
        2. Manage Single-app packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages using Microsoft Intune
      3. Deploy Adobe packages with SCCM
      4. Deploy Adobe packages with ARD
      5. Install products in the Exceptions folder
      6. Uninstall Creative Cloud products
      7. Use Adobe provisioning toolkit enterprise edition
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Release notes
      2. Use Adobe Remote Update Manager
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
  11. Manage your Teams account
    1. Manage your organization's contracts and agreements
    2. Complimentary membership for team members
    3. Update payment details
    4. Manage invoices
    5. Change contract owner
    6. Change your plan
    7. Change reseller
    8. Cancel your plan
    9. Purchase Request compliance
  12. Renewals
    1. Teams membership: Renewals
    2. Enterprise in VIP: Renewals and compliance
  13. Manage contracts
    1. Automated expiration stages for ETLA contracts
    2. Switching contract types within an existing Adobe Admin Console
    3. Manage enterprise trials and special offers
    4. Complimentary membership for team members
    5. Creative Cloud for enterprise - free membership
    6. Frame.io and Creative Cloud for teams and enterprise plans
    7. Value Incentive Plan (VIP) in China
    8. VIP Select help
  14. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  15. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

Applies to enterprise.

Learn to assign access roles to your users and user groups in the Admin Console to have better control over access and permissions.

Assign roles to your users and user groups from the Users > Roles section.

Go to Adobe Admin Console

What are roles and how can they help you

Roles define what users and user groups can see and do in their assigned Adobe apps. System admins can assign roles to control access to features and workflows based on a user’s responsibilities.

User roles help you to:

  • Grant the right level of access without over-permissioning
  • Delegate tasks safely without sharing full admin rights
  • Simplify user management through role-based user groups

Types of roles

There are different roles available for enterprises and K-12 education institutions. Only system admins can assign and manage these roles.

mage displays a modal for editing a user's role and permissions. The "Member" role is selected, and its permissions for Adobe Express are shown, including toggles for "Create and edit Adobe Express templates" and "Publish on social media from Adobe Express".
User Role and Permissions configuration in the Admin Console, showing Adobe Express permissions for the default "Member" role.

 Review the table below to learn more about the roles available for your organization or institution:

For Enterprise ETLA organizations

All users in the Adobe Express product profile are assigned to a Member role by default and have access to the capabilities listed below. You can enable or disable these capabilities from the Permissions section.

Roles

Capabilities

Adobe Express application manager

Customizes the Adobe Express user interface for all members of your organization.

Adobe Express template manager

Creates and edits templates for your organization and overrides template lock restrictions.

Adobe Express social publishing manager

Publishes and schedules content from Adobe Express to social media (Facebook, Instagram, TikTok, LinkedIn, Pinterest, and X).

For Education K-12 institutions

Roles

Capabilities

Member

Assigned automatically to all users in your organization. Admins can manage members' access to comment on shared projects and collaborative workspaces.

Educator

Manages Classrooms and student work in Adobe Express for education. All educators can comment on shared projects and collaborative workflows.

Student

Participates in classroom workflows in Adobe Express and have the same permissions as Members. This role is only applicable via roster sync.
Tip: Creating role-based user groups

Before assigning roles, consider creating or modifying users and groups based on your role assignments. Start with planning your user management strategy.

For example, if you want to assign the Adobe Express template manager role to users A, B, and C, then create a user group with users A, B, and C to simplify the assignment.

Assign roles to users

You can view and manage your users' roles based on their required level of access.

  1. Go to the Adobe Admin Console Users section using your system admin credentials.

  2. Select Roles.

  3. Select the Assign users icon   next to the role you want to assign to the user or user group.

  4. Add users or user groups in the Add users to this role screen.

    Note

    You can only assign roles to existing users and user groups. To add new users, use your preferred user management technique.

  5. Select Save.

You can review your users and their assigned roles in the Roles or Product Profile section of the Admin Console.

Edit a user's role

You can modify a user's roles from the Products > All products and services section at any time.

Go to the specific product and select the Product role dropdown against any user to assign or remove roles.

Image displays the "Default Adobe Express configuration" screen in the Admin Console, showing a list of users, their ID types, and a dropdown menu detailing available Product roles: "Adobe Express application manager", "Adobe Express template manager", and "Adobe Express social publishing manager".
Adobe Admin Console: Modifying Product role assignments within the "Default Adobe Express configuration" view.

Review roles and role settings

You can review available roles, role settings, and assigned users in the Adobe Admin Console Users section. Basic details, such as Users assigned and description, are listed against each role on the Roles page.

Select the edit icon   against any role to view or edit permissions for that role. Member role permissions apply to everyone except the users who are assigned to specific roles.

All user role assignment actions are captured in the Audit log report.

Common questions

Yes, users or user groups can be assigned multiple roles. Permissions on roles are additive, so users will have access if they inherit the same roles from one or more user groups.

User groups can have one or more roles assigned to them. Assign roles and products to user groups so that all users within the group have similar access.

All Adobe Express roles allow specific capabilities. By default, all users in the product profile are assigned to the Member role and already have all permissions enabled.

You must turn off specific permissions from the Member role settings and then assign specific roles to selected users, allowing them only the permissions you want to grant.

Product roles are removed when the product license is removed, and users can no longer exercise the role capabilities. However, user roles such as Educator are not associated with any product and remain assigned to the users regardless of their license.

More like this

Join the conversation

To collaborate, ask questions, and chat with other administrators, visit our Enterprise and Teams Community.

Adobe, Inc.

Get help faster and easier

New user?

Quick links

View all your plans Manage your plans
View quick links
Hide quick links

Legal Notices    |    Online Privacy Policy