User Guide Cancel

Manage user groups

  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin Console overview
      6. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
      3. Deploy Adobe Acrobat 
    3. Deploy Creative Cloud for education
      1. Deployment home
      2. K-12 Onboarding Wizard
      3. Simple setup
      4. Syncing Users
      5. Roster Sync K-12 (US)
      6. Key licensing concepts
      7. Deployment options
      8. Quick tips
      9. Approve Adobe apps in Google Admin Console
      10. Enable Adobe Express in Google Classroom
      11. Integration with Canvas LMS
      12. Integration with Blackboard Learn
      13. Configuring SSO for District Portals and LMSs
      14. Add users through Roster Sync
      15. Kivuto FAQ
      16. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Identity types | Overview
    2. Set up identity | Overview
    3. Set up organization with Enterprise ID
    4. Setup Azure AD federation and sync
      1. Set up SSO with Microsoft via Azure OIDC
      2. Add Azure Sync to your directory
      3. Role sync for Education
      4. Azure Connector FAQ
    5. Set up Google Federation and sync
      1. Set up SSO with Google Federation
      2. Add Google Sync to your directory
      3. Google federation FAQ
    6. Set up organization with Microsoft ADFS
    7. Set up organization for District Portals and LMS
    8. Set up organization with other Identity providers
      1. Create a directory
      2. Verify ownership of a domain
      3. Add domains to directories
    9. SSO common questions and troubleshooting
      1. SSO Common questions
      2. SSO Troubleshooting
      3. Education common questions
  4. Manage your organization setup
    1. Manage existing domains and directories
    2. Enable automatic account creation
    3. Set up organization via directory trust
    4. Migrate to a new authentication provider 
    5. Asset settings
    6. Authentication settings
    7. Privacy and security contacts
    8. Console settings
    9. Manage encryption  
  5. Manage users
    1. Overview
    2. Administrative roles
    3. User management strategies
      1. Manage users individually   
      2. Manage multiple users (Bulk CSV)
      3. User Sync tool (UST)
      4. Microsoft Azure Sync
      5. Google Federation Sync
    4. Assign licenses to a Teams user
    5. Add users with matching email domains
    6. Change user's identity type
    7. Manage user groups
    8. Manage directory users
    9. Manage developers
    10. Migrate existing users to the Adobe Admin Console
    11. Migrate user management to the Adobe Admin Console
  6. Manage products and entitlements
    1. Manage products and product profiles
      1. Manage products
      2. Buy products and licenses
      3. Manage product profiles for enterprise users
      4. Manage automatic assignment rules
      5. Entitle users to train Firefly custom models
      6. Review product requests
      7. Manage self-service policies
      8. Manage app integrations
      9. Manage product permissions in the Admin Console  
      10. Enable/disable services for a product profile
      11. Single App | Creative Cloud for enterprise
      12. Optional services
    2. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Manage profiles
      6. Licensing toolkit
      7. Shared Device Licensing FAQ
  7. Get started with Global Admin Console
    1. Adopt global administration
    2. Select your organization
    3. Manage organization hierarchy
    4. Manage product profiles
    5. Manage administrators
    6. Manage user groups
    7. Update organization policies
    8. Manage policy templates
    9. Allocate products to child organizations
    10. Execute pending jobs
    11. Explore insights
    12. Export or import organization structure
  8. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    3. Reclaim assets from a user
    4. Student asset migration | EDU only
      1. Automatic student asset migration
      2. Migrate your assets
  9. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Acrobat Sign
      1. Set up Adobe Acrobat Sign for enterprise or teams
      2. Adobe Acrobat Sign - Team feature Administrator
      3. Manage Adobe Acrobat Sign on the Admin Console
    5. Creative Cloud for enterprise - free membership
      1. Overview
  10. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Adobe templates for packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages using Microsoft Intune
      3. Deploy Adobe packages with SCCM
      4. Deploy Adobe packages with ARD
      5. Install products in the Exceptions folder
      6. Uninstall Creative Cloud products
      7. Use Adobe provisioning toolkit enterprise edition
      8. Adobe Creative Cloud licensing identifiers
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Use Adobe Remote Update Manager
      2. Resolve RUM errors
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
      3. Creative Cloud package "Installation Failed" error message
  11. Manage your Teams account
    1. Overview
    2. Update payment details
    3. Manage invoices
    4. Change contract owner
    5. Change your plan
    6. Change reseller
    7. Cancel your plan
    8. Purchase Request compliance
    9. Manage your team in Adobe Express
  12. Renewals
    1. Teams membership: Renewals
    2. Enterprise in VIP: Renewals and compliance
  13. Manage contracts
    1. Automated expiration stages for ETLA contracts
    2. Switching contract types within an existing Adobe Admin Console
    3. Value Incentive Plan (VIP) in China
    4. VIP Select help
  14. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  15. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

Create, manage, and share user groups in the Global Admin Console to streamline user management by grouping users with the same permissions, saving time, and ensuring consistency. 

In the Global Admin Console, select an organization, and navigate to User Groups. Share groups across multiple organizations using a single user management source to sync users and groups.

Create user groups

You can either create these user groups individually, in bulk, or directly sync them from an established Azure AD to a federated directory in the Adobe Admin Console.

In the Global Admin Console, you can define user groups with relevant product profiles assigned, to which the user group admins can later add users using the Admin Console.

  1. Sign in to the Global Admin Console, select an organization to edit, and then navigate to the User Groups tab.

  2. Select Add User Group.

    Add user group

  3. Enter the following in the Add User Group dialog box that appears:

    • Name: specify a name for the user group
    • Product Profiles: if you want to grant product access to the current or future members in the user group, click the drop-down arrow to select a Product Profile from the list, or enter the Product Profile name and select it from the drop-down list that displays. If you want to add a product profile that hasn't already been created, you must first do that using the Product Profiles tab.
    • Admins: click the drop-down arrow to select an admin from the list, or enter the admin's email address and select it from the drop-down list that displays. If you want to add a new admin that hasn't already been created, you must first do that using the Admins tab.

    The product profiles you specify are assigned to the User Group, and the Admins you specify become the user group admins for the group. The user group admins can use the Adobe Admin Console for the relevant organization to manage the group.

  4. Select Save.

  5. Select Review pending changes to review the updates. Then, select Submit changes to execute them.

Global admins can assign product profiles and user group admins to the user groups using the Global Admin Console.

Using the Adobe Admin Console, system admins and user group admins can add users and assign admins and product profiles to the user group.

Share user groups

Group projection allows you to use a single user management source to sync user groups and the associated users to multiple Admin Consoles. Global administrators can share any user group from a parent organization to it's child organizations.

Group projection is only available to the hierarchical descendants of the source organization in a downward motion, not upward or side-to-side.

  1. Sign in to the Global Admin Console, select an organization, and navigate to the User Groups tab.

  2. Select the checkboxes for the user groups you want to share.

    Groups might be disabled for sharing in the following cases:

    • The user group is shared from another organization. To share or edit the group, select the organization that owns it from the organization hierarchy.
    • The organization isn't using Adobe storage for business, which is being rolled out globally in a phased manner.
  3. Select Share user group.

  4. Review the user groups to share with other organizations. If you are also a system admin in the selected organization, select the Open in Admin Console   icon to review the list of the user group members in the Adobe Admin Console.

  5. Select Next.

  6. Select the organizations to share user groups with. Use the search field to find an organization in the hierarchy.

  7. Select Share User Groups.

  8. Select Review pending changes to review the updates. Then, select Submit changes to execute them.

    Group projection events are logged for your reference. Learn to view and download audit logs.

When you share a user group, the group and its users are added to the target organization. However, the source user group controls the shared user groups and their users. Admin and product profile assignments are not synchronized between organizations.

Changes in the projected user group's name or associated users in the source user group are automatically updated in the target organization. While the shared user group cannot be managed directly, an admin within the target organization can assign product profiles to a shared group giving license access to the group's users.

Revoke access to shared groups

  1. Sign in to the Global Admin Console, select an organization, and navigate to the User Groups tab.

  2. Select Manage shared access for the relevant user group.

  3. Select the orgazations you want to revoke access from.

  4. Select Revoke access.

  5. While revoking access, you can choose to either delete the user group and users or leave a copy in the target organizations.

    • On deleting, the user group is removed from the target organizations. Users who are not members of other shared groups are also removed, losing access to all products, services, and assets.
    • On leaving a copy, the user group and users remain in the target organizations keeping all assignments intact. However, the user group will no longer be synced and can be managed by the administrators of the target organizations.
  6. Select Revoke access.

  7. Select Review pending changes to review the updates. Then, select Submit changes to execute them.

Edit user groups

  1. Sign in to the Global Admin Console, select an organization, and navigate to the User Groups tab.

  2. Select the More Options  icon for the relevant user group, and select Edit User Group.

    You can't edit user groups that the selected organization doesn't own.

    Edit user group

  3. Update the user group name, product profiles, or admins. Then, select Save.

    In the Edit User Group wizard, you can assign the admin roles only to users who already have an admin role assigned in this organization. Learn how to add new administrators.

  4. Select Review pending changes to review the updates. Then, select Submit changes to execute them.

If you change the name of a shared user group, the changes are automatically updated in the target organization.

Delete user groups

  1. Sign in to the Global Admin Console, select an organization, and navigate to the User Groups tab.

  2. Select the More Options  icon for the relevant user group, and select Delete User Group.

    You can't delete user groups that the selected organization doesn't own.

    Delete user group

  3. Select Ok in the dialog box that appears.

    Caution:

    Deleting a user group can impact your users. Ensure that there is no access or information that will be lost when the user group is deleted.

  4. After you have edited the organizations, select Review pending changes to review them. Then, select Submit changes to execute them.

 Adobe

Get help faster and easier

New user?

Adobe MAX 2024

Adobe MAX
The Creativity Conference

Oct 14–16 Miami Beach and online

Adobe MAX

The Creativity Conference

Oct 14–16 Miami Beach and online

Adobe MAX 2024

Adobe MAX
The Creativity Conference

Oct 14–16 Miami Beach and online

Adobe MAX

The Creativity Conference

Oct 14–16 Miami Beach and online