User Guide Cancel

Manage administrators

  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin Console overview
      6. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
      3. Deploy Adobe Acrobat 
    3. Deploy Creative Cloud for education
      1. Deployment home
      2. K-12 Onboarding Wizard
      3. Simple setup
      4. Syncing Users
      5. Roster Sync K-12 (US)
      6. Key licensing concepts
      7. Deployment options
      8. Quick tips
      9. Approve Adobe apps in Google Admin Console
      10. Enable Adobe Express in Google Classroom
      11. Integration with Canvas LMS
      12. Integration with Blackboard Learn
      13. Configuring SSO for District Portals and LMSs
      14. Add users through Roster Sync
      15. Kivuto FAQ
      16. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Identity types | Overview
    2. Set up identity | Overview
    3. Set up organization with Enterprise ID
    4. Setup Azure AD federation and sync
      1. Set up SSO with Microsoft via Azure OIDC
      2. Add Azure Sync to your directory
      3. Role sync for Education
      4. Azure Connector FAQ
    5. Set up Google Federation and sync
      1. Set up SSO with Google Federation
      2. Add Google Sync to your directory
      3. Google federation FAQ
    6. Set up organization with Microsoft ADFS
    7. Set up organization for District Portals and LMS
    8. Set up organization with other Identity providers
      1. Create a directory
      2. Verify ownership of a domain
      3. Add domains to directories
    9. SSO common questions and troubleshooting
      1. SSO Common questions
      2. SSO Troubleshooting
      3. Education common questions
  4. Manage your organization setup
    1. Manage existing domains and directories
    2. Enable automatic account creation
    3. Set up organization via directory trust
    4. Migrate to a new authentication provider 
    5. Asset settings
    6. Authentication settings
    7. Privacy and security contacts
    8. Console settings
    9. Manage encryption  
  5. Manage users
    1. Overview
    2. Administrative roles
    3. User management strategies
      1. Manage users individually   
      2. Manage multiple users (Bulk CSV)
      3. User Sync tool (UST)
      4. Microsoft Azure Sync
      5. Google Federation Sync
    4. Assign licenses to a Teams user
    5. In-app user management for teams
      1. Manage your team in Adobe Express
      2. Manage your team in Adobe Acrobat
    6. Add users with matching email domains
    7. Change user's identity type
    8. Manage user groups
    9. Manage directory users
    10. Manage developers
    11. Migrate existing users to the Adobe Admin Console
    12. Migrate user management to the Adobe Admin Console
  6. Manage products and entitlements
    1. Manage products and product profiles
      1. Manage products
      2. Buy products and licenses
      3. Manage product profiles for enterprise users
      4. Manage automatic assignment rules
      5. Entitle users to train Firefly custom models
      6. Review product requests
      7. Manage self-service policies
      8. Manage app integrations
      9. Manage product permissions in the Admin Console  
      10. Enable/disable services for a product profile
      11. Single App | Creative Cloud for enterprise
      12. Optional services
    2. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Manage profiles
      6. Licensing toolkit
      7. Shared Device Licensing FAQ
  7. Get started with Global Admin Console
    1. Adopt global administration
    2. Select your organization
    3. Manage organization hierarchy
    4. Manage product profiles
    5. Manage administrators
    6. Manage user groups
    7. Update organization policies
    8. Manage policy templates
    9. Allocate products to child organizations
    10. Execute pending jobs
    11. Explore insights
    12. Export or import organization structure
  8. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    3. Reclaim assets from a user
    4. Student asset migration | EDU only
      1. Automatic student asset migration
      2. Migrate your assets
  9. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Acrobat Sign
      1. Set up Adobe Acrobat Sign for enterprise or teams
      2. Adobe Acrobat Sign - Team feature Administrator
      3. Manage Adobe Acrobat Sign on the Admin Console
    5. Creative Cloud for enterprise - free membership
      1. Overview
  10. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Manage pre-generated packages
        1. Manage Adobe templates
        2. Manage Single-app packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages using Microsoft Intune
      3. Deploy Adobe packages with SCCM
      4. Deploy Adobe packages with ARD
      5. Install products in the Exceptions folder
      6. Uninstall Creative Cloud products
      7. Use Adobe provisioning toolkit enterprise edition
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Release notes
      2. Use Adobe Remote Update Manager
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
  11. Manage your Teams account
    1. Overview
    2. Update payment details
    3. Manage invoices
    4. Change contract owner
    5. Change your plan
    6. Change reseller
    7. Cancel your plan
    8. Purchase Request compliance
  12. Renewals
    1. Teams membership: Renewals
    2. Enterprise in VIP: Renewals and compliance
  13. Manage contracts
    1. Automated expiration stages for ETLA contracts
    2. Switching contract types within an existing Adobe Admin Console
    3. Value Incentive Plan (VIP) in China
    4. VIP Select help
  14. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  15. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

Applies to enterprise.

Explore global administrator capabilities and learn how to delegate and distribute the administration of users, product licenses, and groups to admins for each individual organization.

In the Global Admin Console, select an organization, and navigate to the Admins tab to add, edit, or remove admin rights.

The Global Admin Console also introduces a role, the global administrator, that is distinct from a system administrator and allows to do the following:

  • View the global landscape of their total Adobe investment across those Admin Consoles added to the Global Admin Console hierarchy.
  • Monitor their Adobe license & resource assignments and usage across multiple Admin Consoles.
  • Create Admin Consoles or organizations.
  • Allocate product licenses from a root or parent Admin Console to child Admin Consoles sitting below within the hierarchy.
  • Maintain their current day-to-day operations; the system admins can continue to manage their Admin Consoles. As an example, a global admin can allocate a product to a child Admin Console but not assign it to its users. The system admin will receive the seats within their Admin Console and will assign the products to their users.
  • Optionally apply organizational policies to any Admin Consoles in the hierarchy.

Fundamental administrative tasks

The Global Admin Console is designed to work across multiple organizations and Admin Consoles. The following table outlines the different capabilities and where they can be completed—Admin Console or Global Admin Console.

Task Global Admin Console Admin Console
Create, reparent, and delete child organizations
Work with multiple organizations
Manage administrators For one or more organizations

For one organization


Manage Product Profiles and user groups

Define and manage policies
Allocate products across organizations
Allocate products to users
Manage users
Manage packages
Set up domains and directories
Manage enterprise storage and encryption

Manage administrators

You can create a flexible administrative hierarchy that enables fine-grained management of Adobe product access and usage. Like in the Adobe Admin Console, the Global Admin Console allows you to add system admins, product admins, product profile admins, user group admins, deployment admins, support admins, and storage admins. These admins can perform their respective administrative tasks in the organizations they are the admin of. Apart from these roles, there are two new roles for the global administration: global admin and global viewer.

Global admin is a transitive role. Making a user the global admin of an organization automatically makes that user a global admin of all children of that organization, directly or indirectly. Also, if a new organization is created in the organization hierarchy, all global admins of any parents of that organization will immediately become global admins of the newly created organization.

The following are the capabilities of the Global Admin role:

  • Create and delete child organizations
  • Set and edit policies
  • Set and modify administrative roles
  • Add and remove products in child organizations
  • Set or change resource allocations for child organizations
  • Manage Product Profiles and User Groups

Following are the capabilities of the Global Viewer role:

  • View the list of user groups, products, product profiles, administrators, policies set, and resources in the organization and in the child organizations.

Distributed administration

By managing administrators, a Global Admin can delegate and distribute the administration of users, product licenses, and groups to admins for each individual organization. The admin added to an organization by a global administrator is given the flexibility to manage the organization without having any visibility into the administration of other orgs. So, the global admin can delegate administration of resources and users keeping the data on those resources and users isolated.

A global admin can create organizations, distribute resources such as products and storage to those organizations, manage identity setup, and create and apply organization policy templates. A system admin added to an organization by a global admin can assign products to users, onboard users, create and manage product profiles, and perform other administrative tasks within that organization.

Add an admin

  1. In the Global Admin Console, select an organization to edit, then navigate to the Admins tab.

  2. Select Add Admin.

    Add an admin

  3. In the Add Admin dialog box that appears, enter the User Details—Email,  First Name, Last Name, Account Type, Country Code.

    If you are trying to add an existing user as admin, choose the same account type as the existing user, otherwise the add operation will fail.

    Note:

    Organizations can have restrictions on which Account Types can be added. These may be based on policies or on other configuration parameters for an organization. Organizations do not allow adding both AdobeID users and BusinessID users at the same time. In general, there should not be users of both types in an organization but depending on the order in which rules are set there may be some users of a particular Account Type that pre-date the application of policies or rules.

  4. Select one or more admin roles from the Admin Rights section.

    For admin types like product administrator, product profile administrator, and user group administrator, select the specific products, profiles, and groups respectively.

    Add an admin

  5. Select Save.

  6. After editing the organizations, select Review Pending Changes. After reviewing, select Submit Changes to execute them.

    When an admin role is added, the user receives an email notification informing them of the change in their role.

After the administrator is added, they receive an email message inviting them to accept their role and giving them a link to the Admin Console. If they are added as both a global administrator and some other role, they will receive two invitations, one to the Global Admin console and one to the Admin Console.

Edit an admin

  1. Select an organization to edit and navigate to the Admins tab.

  2. Select the More Options  icon for the relevant admin, and select Edit Admin.

    Edit an admin

  3. Update the admin details and select Save.

  4. Select Review Pending Changes after you are done editing the organizations.

    A separate command appears in the pending change list for each added or removed admin role. After reviewing, select Submit Changes to execute them.

Remove admin rights

  1. Select an organization to edit and navigate to the Admins tab.

  2. Select the More Options  icon for the relevant admin, and select Remove Admin Rights.

    Remove admin rights

  3. Select Ok in the dialog box that appears.

  4. Select Review Pending Changes after you are done editing the organizations. After reviewing, select Submit Changes to execute them.

    After you delete an admin, the admin receives an email notification informing them of the loss of access to the admin console for that organization.

Get help faster and easier

New user?