Sign in to the Global Admin Console, select an organization to edit, and then navigate to the User Groups tab.
Last updated on
23 July 2024
- Adobe Enterprise & Teams: Administration guide
- Plan your deployment
- Basic concepts
- Deployment Guides
- Deploy Creative Cloud for education
- Deployment home
- K-12 Onboarding Wizard
- Simple setup
- Syncing Users
- Roster Sync K-12 (US)
- Key licensing concepts
- Deployment options
- Quick tips
- Approve Adobe apps in Google Admin Console
- Enable Adobe Express in Google Classroom
- Integration with Canvas LMS
- Integration with Blackboard Learn
- Configuring SSO for District Portals and LMSs
- Add users through Roster Sync
- Kivuto FAQ
- Primary and Secondary institution eligibility guidelines
- Set up your organization
- Identity types | Overview
- Set up identity | Overview
- Set up organization with Enterprise ID
- Setup Azure AD federation and sync
- Set up Google Federation and sync
- Set up organization with Microsoft ADFS
- Set up organization for District Portals and LMS
- Set up organization with other Identity providers
- SSO common questions and troubleshooting
- Manage your organization setup
- Manage users
- Overview
- Administrative roles
- User management strategies
- Assign licenses to a Teams user
- Add users with matching email domains
- Change user's identity type
- Manage user groups
- Manage directory users
- Manage developers
- Migrate existing users to the Adobe Admin Console
- Migrate user management to the Adobe Admin Console
- Overview
- Manage products and entitlements
- Manage products and product profiles
- Manage products
- Buy products and licenses
- Manage product profiles for enterprise users
- Manage automatic assignment rules
- Entitle users to train Firefly custom models
- Review product requests
- Manage self-service policies
- Manage app integrations
- Manage product permissions in the Admin Console
- Enable/disable services for a product profile
- Single App | Creative Cloud for enterprise
- Optional services
- Manage Shared Device licenses
- Manage products and product profiles
- Get started with Global Admin Console
- Adopt global administration
- Select your organization
- Manage organization hierarchy
- Manage product profiles
- Manage administrators
- Manage user groups
- Update organization policies
- Manage policy templates
- Allocate products to child organizations
- Execute pending jobs
- Explore insights
- Export or import organization structure
- Manage storage and assets
- Storage
- Asset migration
- Reclaim assets from a user
- Student asset migration | EDU only
- Manage services
- Adobe Stock
- Custom fonts
- Adobe Asset Link
- Adobe Acrobat Sign
- Creative Cloud for enterprise - free membership
- Deploy apps and updates
- Overview
- Create packages
- Customize packages
- Deploy Packages
- Manage updates
- Adobe Update Server Setup Tool (AUSST)
- Adobe Remote Update Manager (RUM)
- Troubleshoot
- Manage your Teams account
- Renewals
- Manage contracts
- Reports & logs
- Get help
Create, manage, and share user groups in the Global Admin Console to streamline user management by grouping users with the same permissions, saving time, and ensuring consistency.
In the Global Admin Console, select an organization, and navigate to User Groups. Share groups across multiple organizations using a single user management source to sync users and groups.
Create user groups
You can either create these user groups individually, in bulk, or directly sync them from an established Azure AD to a federated directory in the Adobe Admin Console.
In the Global Admin Console, you can define user groups with relevant product profiles assigned, to which the user group admins can later add users using the Admin Console.
-
-
Select Add User Group.
-
Enter the following in the Add User Group dialog box that appears:
- Name: specify a name for the user group
- Product Profiles: if you want to grant product access to the current or future members in the user group, click the drop-down arrow to select a Product Profile from the list, or enter the Product Profile name and select it from the drop-down list that displays. If you want to add a product profile that hasn't already been created, you must first do that using the Product Profiles tab.
- Admins: click the drop-down arrow to select an admin from the list, or enter the admin's email address and select it from the drop-down list that displays. If you want to add a new admin that hasn't already been created, you must first do that using the Admins tab.
The product profiles you specify are assigned to the User Group, and the Admins you specify become the user group admins for the group. The user group admins can use the Adobe Admin Console for the relevant organization to manage the group.
-
Select Save.
-
Select Review pending changes to review the updates. Then, select Submit changes to execute them.
Global admins can assign product profiles and user group admins to the user groups using the Global Admin Console.
Using the Adobe Admin Console, system admins and user group admins can add users and assign admins and product profiles to the user group.
Group projection allows you to use a single user management source to sync user groups and the associated users to multiple Admin Consoles. Global administrators can share any user group from a parent organization to it's child organizations.
Group projection is only available to the hierarchical descendants of the source organization in a downward motion, not upward or side-to-side.
-
Sign in to the Global Admin Console, select an organization, and navigate to the User Groups tab.
-
Select the checkboxes for the user groups you want to share.
Groups might be disabled for sharing in the following cases:
- The user group is shared from another organization. To share or edit the group, select the organization that owns it from the organization hierarchy.
- The organization isn't using Adobe storage for business, which is being rolled out globally in a phased manner.
-
Select Share user group.
-
Review the user groups to share with other organizations. If you are also a system admin in the selected organization, select the Open in Admin Console icon to review the list of the user group members in the Adobe Admin Console.
-
Select Next.
-
Select the organizations to share user groups with. Use the search field to find an organization in the hierarchy.
-
Select Share User Groups.
-
Select Review pending changes to review the updates. Then, select Submit changes to execute them.
Group projection events are logged for your reference. Learn to view and download audit logs.
When you share a user group, the group and its users are added to the target organization. However, the source user group controls the shared user groups and their users. Admin and product profile assignments are not synchronized between organizations.
Changes in the projected user group's name or associated users in the source user group are automatically updated in the target organization. While the shared user group cannot be managed directly, an admin within the target organization can assign product profiles to a shared group giving license access to the group's users.
Revoke access to shared groups
-
Sign in to the Global Admin Console, select an organization, and navigate to the User Groups tab.
-
Select Manage shared access for the relevant user group.
-
Select the orgazations you want to revoke access from.
-
Select Revoke access.
-
While revoking access, you can choose to either delete the user group and users or leave a copy in the target organizations.
- On deleting, the user group is removed from the target organizations. Users who are not members of other shared groups are also removed, losing access to all products, services, and assets.
- On leaving a copy, the user group and users remain in the target organizations keeping all assignments intact. However, the user group will no longer be synced and can be managed by the administrators of the target organizations.
-
Select Revoke access.
-
Select Review pending changes to review the updates. Then, select Submit changes to execute them.
Edit user groups
-
Sign in to the Global Admin Console, select an organization, and navigate to the User Groups tab.
-
Select the More Options
icon for the relevant user group, and select Edit User Group.You can't edit user groups that the selected organization doesn't own.
-
Update the user group name, product profiles, or admins. Then, select Save.
In the Edit User Group wizard, you can assign the admin roles only to users who already have an admin role assigned in this organization. Learn how to add new administrators.
-
Select Review pending changes to review the updates. Then, select Submit changes to execute them.
If you change the name of a shared user group, the changes are automatically updated in the target organization.
Delete user groups
-
Sign in to the Global Admin Console, select an organization, and navigate to the User Groups tab.
-
Select the More Options
icon for the relevant user group, and select Delete User Group.You can't delete user groups that the selected organization doesn't own.
-
Select Ok in the dialog box that appears.
Caution:Deleting a user group can impact your users. Ensure that there is no access or information that will be lost when the user group is deleted.
-
After you have edited the organizations, select Review pending changes to review them. Then, select Submit changes to execute them.
