User Guide Cancel

Asset settings

  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin Console overview
      6. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
      3. Deploy Adobe Acrobat 
    3. Deploy Creative Cloud for education
      1. Deployment home
      2. K-12 Onboarding Wizard
      3. Simple setup
      4. Syncing Users
      5. Roster Sync K-12 (US)
      6. Key licensing concepts
      7. Deployment options
      8. Quick tips
      9. Approve Adobe apps in Google Admin Console
      10. Enable Adobe Express in Google Classroom
      11. Integration with Canvas LMS
      12. Integration with Blackboard Learn
      13. Configuring SSO for District Portals and LMSs
      14. Add users through Roster Sync
      15. Kivuto FAQ
      16. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Identity types | Overview
    2. Set up identity | Overview
    3. Set up organization with Enterprise ID
    4. Setup Azure AD federation and sync
      1. Set up SSO with Microsoft via Azure OIDC
      2. Add Azure Sync to your directory
      3. Role sync for Education
      4. Azure Connector FAQ
    5. Set up Google Federation and sync
      1. Set up SSO with Google Federation
      2. Add Google Sync to your directory
      3. Google federation FAQ
    6. Set up organization with Microsoft ADFS
    7. Set up organization for District Portals and LMS
    8. Set up organization with other Identity providers
      1. Create a directory
      2. Verify ownership of a domain
      3. Add domains to directories
    9. SSO common questions and troubleshooting
      1. SSO Common questions
      2. SSO Troubleshooting
      3. Education common questions
  4. Manage your organization setup
    1. Manage existing domains and directories
    2. Enable automatic account creation
    3. Set up organization via directory trust
    4. Migrate to a new authentication provider 
    5. Asset settings
    6. Authentication settings
    7. Privacy and security contacts
    8. Console settings
    9. Manage encryption  
  5. Manage users
    1. Overview
    2. Administrative roles
    3. User management strategies
      1. Manage users individually   
      2. Manage multiple users (Bulk CSV)
      3. User Sync tool (UST)
      4. Microsoft Azure Sync
      5. Google Federation Sync
    4. Assign licenses to a Teams user
    5. In-app user management for teams
      1. Manage your team in Adobe Express
      2. Manage your team in Adobe Acrobat
    6. Add users with matching email domains
    7. Change user's identity type
    8. Manage user groups
    9. Manage directory users
    10. Manage developers
    11. Migrate existing users to the Adobe Admin Console
    12. Migrate user management to the Adobe Admin Console
  6. Manage products and entitlements
    1. Manage products and product profiles
      1. Manage products
      2. Buy products and licenses
      3. Manage product profiles for enterprise users
      4. Manage automatic assignment rules
      5. Entitle users to train Firefly custom models
      6. Review product requests
      7. Manage self-service policies
      8. Manage app integrations
      9. Manage product permissions in the Admin Console  
      10. Enable/disable services for a product profile
      11. Single App | Creative Cloud for enterprise
      12. Optional services
    2. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Manage profiles
      6. Licensing toolkit
      7. Shared Device Licensing FAQ
  7. Get started with Global Admin Console
    1. Adopt global administration
    2. Select your organization
    3. Manage organization hierarchy
    4. Manage product profiles
    5. Manage administrators
    6. Manage user groups
    7. Update organization policies
    8. Manage policy templates
    9. Allocate products to child organizations
    10. Execute pending jobs
    11. Explore insights
    12. Export or import organization structure
  8. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    3. Reclaim assets from a user
    4. Student asset migration | EDU only
      1. Automatic student asset migration
      2. Migrate your assets
  9. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Acrobat Sign
      1. Set up Adobe Acrobat Sign for enterprise or teams
      2. Adobe Acrobat Sign - Team feature Administrator
      3. Manage Adobe Acrobat Sign on the Admin Console
    5. Creative Cloud for enterprise - free membership
      1. Overview
  10. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Manage pre-generated packages
        1. Manage Adobe templates
        2. Manage Single-app packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages using Microsoft Intune
      3. Deploy Adobe packages with SCCM
      4. Deploy Adobe packages with ARD
      5. Install products in the Exceptions folder
      6. Uninstall Creative Cloud products
      7. Use Adobe provisioning toolkit enterprise edition
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Release notes
      2. Use Adobe Remote Update Manager
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
  11. Manage your Teams account
    1. Overview
    2. Update payment details
    3. Manage invoices
    4. Change contract owner
    5. Change your plan
    6. Change reseller
    7. Cancel your plan
    8. Purchase Request compliance
  12. Renewals
    1. Teams membership: Renewals
    2. Enterprise in VIP: Renewals and compliance
  13. Manage contracts
    1. Automated expiration stages for ETLA contracts
    2. Switching contract types within an existing Adobe Admin Console
    3. Value Incentive Plan (VIP) in China
    4. VIP Select help
  14. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  15. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

Asset settings give an organization control over how its assets are shared outside the organization.

To manage how users in your organization share company-owned assets, navigate to Settings > Asset settings in the Adobe Admin Console.

Note:

Asset Settings are not a digital rights management system (DRM) or a complete asset protection system. Employees with access to certain assets can still copy them and share with others outside the organization using third-party systems.

Sharing options

The System administrator can select a restrictive setting that limits employees from using specific sharing features within Creative Cloud and Document Cloud. Asset settings and other third-party organizational policy enforcement systems are used to ensure that assets are only shared with appropriate external entities.

Deployment Considerations

Before you turn on sharing restrictions, consider the impact it has on your end users.

After you choose a setting, you cannot stop or reverse the consequent deletion process. If you choose No public link sharing, all existing public links are removed and users with these links can no longer access the linked content. If you choose Sharing Limited to Org Members and Trusted Users, any current external collaborators who are not part of the org or claimed, trusted, or authorized domains lose access to content previously shared with them. Users can no longer access Content Schedules in Adobe Express and scheduled social media posts are paused.

Below are the Creative Cloud and Document Cloud sharing and publishing functionalities that are impacted when you select No public link sharing or Sharing Limited to Org Members and Trusted Users.

Application

Impacted features

Application

Impacted features

Adobe Comp

Share, Send to Behance

Adobe XD

Invitations, Share link

Adobe Express

Share to social, access Content Scheduler

Adobe Stock

Invitations, Share link

After Effects

Invite to Team Project, Invite to Library

Aero (mobile)

Publish link, Post to Behance

Animate

Social share

Behance

Creating or updating projects or Work in Progress, Invitations

Capture

Share, Invitations

Creative Cloud (desktop and mobile)

Get link, Invitations

Creative Cloud Assets

Get link, Invitations, Share to Slack

Creative Cloud Libraries

Get link, Invitations, Share to Slack

Dimension

Generating public links

Firefly

Share link

Fresco

Get link, Invitations

Illustrator and Illustrator Draw

Link to project, Invitations

InDesign

Publish Online, Share for Review

Lightroom

Share

Photoshop (desktop)

Invitations

Photoshop (mobile)

Share to social

Photoshop Sketch

Link to Project

Portfolio

Access to Portfolio site, create drafts, and publish

Podcast

Invite guests, Share template

Premiere Pro

Invite to Team Projects

Note:
  • You can't enable or disable Frame.io sharing on the Admin Console.
  • Starting August 15, 2024, all new Lightroom shares will follow Enterprise sharing restrictions. These restrictions will also apply to existing shares starting December 5, 2024.

Learn more about enabling and disabling services.

Application

Impacted features

Application

Impacted features

Acrobat and Reader desktop apps

Share

Adobe Document Cloud for Microsoft Outlook

Share

Mobile apps (including Adobe Scan and Acrobat)

Share Link, Share Document Cloud Link

Web services (cloud.acrobat.com)

Share

Choose Sharing Options

To choose a restrictive Asset Setting for your organization, do the following:

  1. In the Admin Console, navigate to Settings > Asset Settings.

  2. Choose a Sharing Restrictions Policy.

    You can choose from three levels of restrictions. Once you choose a more restrictive setting, you cannot stop or undo the loss of existing public links, shared folders, or document collaborations. Users can no longer access Content Schedules in Adobe Express and scheduled social media posts are paused. 

    If you select Sharing Limited to Org Members and Trusted Users, ensure that you define your authorized domains. Any current external collaborators who are not part of the org or claimed, trusted, or authorized domains will lose access to content previously shared with them.

    Note:

    To use the option Sharing Limited to Org Members and Trusted Users with Document Cloud, you must add your claimed and trusted domains to the Authorized Domains.

    Sharing Options

    Restrictions

    Impact on existing links and collaborations

    No restrictions (Default)

    • You can keep this default setting whereby users are allowed to share public links, publish posts to social media, and collaborate on shared folders with anyone inside or outside the organization.
    • Recommended for enterprises who trust their employees to have freedom, control, and access to every Creative Cloud and Document Cloud feature.

    No impact.

    No public link sharing

    • Prevents users from creating public links and posting to social media.
    • Recommended for enterprises who want to prevent public sharing but still want to allow invitation-based sharing with anyone inside and outside of the organization.

    Deletes all existing public links. Once this process starts, you cannot stop or undo it. Users can no longer access Content Schedules in Adobe Express and scheduled social media posts are paused.

    Sharing limited to org members and trusted users

    • You can restrict invitation-based sharing to recipients in your org, claimed domainstrusted domains, and authorized domains. After you set this policy, the users are prevented from sharing organization-owned assets with external users who are not members of the org or in the list of allowed domains.
    • Recommended for enterprises who need tight control over which external domains can access organization assets.

    Deletes all existing public links and deletes all existing collaborations on shared documents and folders with users who are not in the org or an allowed domain. Once this process starts, you cannot stop or undo it. Users can no longer access Content Schedules in Adobe Express and scheduled social media posts are paused.  

    The time taken to restrict sharing through Asset Settings is proportional to the number of users in the organization and the sharing relationships between them. For some Adobe products and services, it also involves invalidating cached entries in CDNs and removing preview images from slack. If the Asset Setting is changed, it can take up to 24 hours to fully take effect.

    Caution:

    Users will be prevented from sharing assets with everyone in an organization with more than 500,000 users.

  3. Click Confirm.

    If you want your users to continue sharing organization-owned assets with specific external organizations or individuals, do the following.

    • For an external organization such as an agency: Add the agency’s domain to the authorized list of domains under Asset Settings in the Adobe Admin Console.
    • For a freelancer: Issue the individual an Enterprise ID, or Federated ID from your organization. Or, add the user as a Business ID type to your organization on the Admin Console.
  4. Choose an Access Request Policy and click Confirm.

    You can use this default setting to allow users with no permissions to a folder or document to request access to it.

    For added privacy, you can use this setting to prevent users from requesting access to a document that has not been shared with them.

    By default, access requests are allowed. So, a user with the link to a shared resource, but without the permission to view it, can request access. Users with sharing permissions on the document receive notifications for each access request and can decide whether to grant or deny access.

    The requester receives a notification when the access is granted or denied.

    Note:

    If you have a sharing limited to org members and trusted users policy selected, that restriction is applied when users attempt to grant an access request made by someone outside the organization. 

Authorized domains

Authorized Domains are the domains that are safe to collaborate with. If you have selected Sharing Limited to Org Members and Trusted Users, you can add domains to the Authorized Domains.

Add authorized domains

  1. In the Admin Console, navigate to Settings Asset Settings > Authorized domains.

  2. Click Add Domains.

  3. Enter the domains in the Add Domains dialog. You can add multiple domains separated by commas. Click Add.

    Note:

    To use the option Sharing Limited to Org Members and Trusted Users with Document Cloud, you must add your claimed and trusted domains to the Authorized Domains.

Remove authorized domains

While managing the authorized domains on the Admin Console, to remove domains from the list, select the check box to the left of the domain names, and click Remove Domains. Then, click Remove to confirm.

The domain name is removed from the Authorized Domains. If the sharing option is Sharing Limited to Org Members and Trusted Users, any shares to the removed domain are revoked.

Caution:

Removing domains from the authorized list deletes all existing collaborations on shared documents and folders between users in that domain and the users in your organization. Once this process starts, you cannot stop or undo it.

Content credentials

Content Credentials allow creators to attach extra information to their content when they export or download it.

By turning on the Content Credentials toggle, you can allow creators to receive more recognition for their work, connect with others online, and enhance transparency for their audience. Learn more about Content credentials.

Implications for users in multiple organizations

Adobe strongly recommends that a user only be a member of one organization. Where users must be members of multiple organizations, all organizations must have the same Sharing Policy and Allow Lists configured.

Get help faster and easier

New user?