User Guide Cancel

Manage automatic assignment rules

Search
Enterprise

Enterprise

Admin Console
  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin Console overview
      6. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
      3. Deploy Adobe Acrobat 
    3. Deploy Creative Cloud for education
      1. Deployment home
      2. K-12 Onboarding Wizard
      3. Simple setup
      4. Syncing Users
      5. Roster Sync K-12 (US)
      6. Key licensing concepts
      7. Deployment options
      8. Quick tips
      9. Approve Adobe apps in Google Admin Console
      10. Enable Adobe Express in Google Classroom
      11. Integration with Canvas LMS
      12. Integration with Blackboard Learn
      13. Configuring SSO for District Portals and LMSs
      14. Add users through Roster Sync
      15. Kivuto FAQ
      16. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Identity types | Overview
    2. Set up identity | Overview
    3. Set up organization with Enterprise ID
    4. Setup Azure AD federation and sync
      1. Set up SSO with Microsoft via Azure OIDC
      2. Add Azure Sync to your directory
      3. Role sync for Education
      4. Azure Connector FAQ
    5. Set up Google Federation and sync
      1. Set up SSO with Google Federation
      2. Add Google Sync to your directory
      3. Google federation FAQ
    6. Set up organization with Microsoft ADFS
    7. Set up organization for District Portals and LMS
    8. Set up organization with other Identity providers
      1. Create a directory
      2. Verify ownership of a domain
      3. Add domains to directories
    9. SSO common questions and troubleshooting
      1. SSO Common questions
      2. SSO Troubleshooting
      3. Education common questions
  4. Manage your organization setup
    1. Manage existing domains and directories
    2. Enable automatic account creation
    3. Set up organization via directory trust
    4. Migrate to a new authentication provider 
    5. Asset settings
    6. Authentication settings
    7. Privacy and security contacts
    8. Console settings
    9. Manage encryption  
  5. Manage users
    1. Overview
    2. Administrative roles
    3. User management strategies
      1. Manage users individually   
      2. Manage multiple users (Bulk CSV)
      3. User Sync tool (UST)
      4. Microsoft Azure Sync
      5. Google Federation Sync
    4. Assign licenses to a Teams user
    5. Add users with matching email domains
    6. Change user's identity type
    7. Manage user groups
    8. Manage directory users
    9. Manage developers
    10. Migrate existing users to the Adobe Admin Console
    11. Migrate user management to the Adobe Admin Console
  6. Manage products and entitlements
    1. Manage products and product profiles
      1. Manage products
      2. Buy products and licenses
      3. Manage product profiles for enterprise users
      4. Manage automatic assignment rules
      5. Entitle users to train Firefly custom models
      6. Review product requests
      7. Manage self-service policies
      8. Manage app integrations
      9. Manage product permissions in the Admin Console  
      10. Enable/disable services for a product profile
      11. Single App | Creative Cloud for enterprise
      12. Optional services
    2. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Manage profiles
      6. Licensing toolkit
      7. Shared Device Licensing FAQ
  7. Get started with Global Admin Console
    1. Adopt global administration
    2. Select your organization
    3. Manage organization hierarchy
    4. Manage product profiles
    5. Manage administrators
    6. Manage user groups
    7. Update organization policies
    8. Manage policy templates
    9. Allocate products to child organizations
    10. Execute pending jobs
    11. Explore insights
    12. Export or import organization structure
  8. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    3. Reclaim assets from a user
    4. Student asset migration | EDU only
      1. Automatic student asset migration
      2. Migrate your assets
  9. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Acrobat Sign
      1. Set up Adobe Acrobat Sign for enterprise or teams
      2. Adobe Acrobat Sign - Team feature Administrator
      3. Manage Adobe Acrobat Sign on the Admin Console
    5. Creative Cloud for enterprise - free membership
      1. Overview
  10. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Adobe templates for packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages using Microsoft Intune
      3. Deploy Adobe packages with SCCM
      4. Deploy Adobe packages with ARD
      5. Install products in the Exceptions folder
      6. Uninstall Creative Cloud products
      7. Use Adobe provisioning toolkit enterprise edition
      8. Adobe Creative Cloud licensing identifiers
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Use Adobe Remote Update Manager
      2. Resolve RUM errors
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
      3. Creative Cloud package "Installation Failed" error message
  11. Manage your Teams account
    1. Overview
    2. Update payment details
    3. Manage invoices
    4. Change contract owner
    5. Change your plan
    6. Change reseller
    7. Cancel your plan
    8. Purchase Request compliance
    9. Manage your team in Adobe Express
  12. Renewals
    1. Teams membership: Renewals
    2. Enterprise in VIP: Renewals and compliance
  13. Manage contracts
    1. Automated expiration stages for ETLA contracts
    2. Switching contract types within an existing Adobe Admin Console
    3. Value Incentive Plan (VIP) in China
    4. VIP Select help
  14. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  15. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

System administrators can allow products to be provisioned automatically to qualified users based on set assignment rules.

  To set up automatic assignment rules, sign in to the Adobe Admin Console and navigate to Products > Products access automation > Automatic assignment rules.

Automatic Assignment Rules

Note:

This feature is only available if your organization uses Adobe storage for business, which is being rolled out globally in a phased manner.

Overview

By setting up automatic assignment rules, System Administrators can automate the process of assigning specified Adobe products and services to users in their organization. These rules allow a select set of users to gain immediate access to a product when they request it from an entry point indicated by the administrator.

Currently, users can request access to Adobe apps and services from the following surfaces:

  • Creative Cloud desktop app
  • Creative Cloud on the web (desktop only)

Adobe will continue to add more applications to this list.

To have a more granular level of control over product assignment, you can choose to review each product request that the users send instead of setting up assignment rules. Learn more about the end-user request access experience.

Add automatic assignment rules

As a System Administrator, you can set up automatic assignment rules to automatically approve and provide the requested product or service to users in your Admin Console. Enterprise administrators can also set other eligibility criteria based on selected domains or directories instead of setting the rule for all users in the organization.

  1. Sign in to the Admin Console and navigate to Products > Product access automation > Automatic assignment rules.

  2. Select Add product.

  3. Select a product and product profile (enterprise only) to be automatically assigned to eligible users. You can choose to create more than one rule per product, but each must include a unique product profile.

    Caution:

    If you create multiple rules for the same product using different product profiles, multiple licenses may be assigned to eligible users when they request access.

    Add automatic assignment rule screen with a product and product profile selected
    Select a product and product profile to be assigned.

    When you create an auto-assignment rule for a product that provides API access, it automatically assigns the users as developers (if they are not already assigned) to provide them with access to APIs in Adobe developer tools. Learn more about managing API developers.

  4. Select Next and choose eligible users for the rule. 

    • All users in this organization: All existing and new users added to the organization are eligible to be automatically provisioned a license upon request for the selected product.
    • Users in selected directories or domains: All existing and new users added to the selected directories or domains are eligible to be automatically provisioned a license upon request for the selected product.
    Note:

    The option to choose eligible users defaults to All users in this organization if the product selected in the previous step is a Teams product.

  5. If you choose Users in selected directories or domains, select Add directory to add the directories and domains to include.

    When you select a directory, all active domains claimed in the directory are included. If you want to select specific domains, deselect the checkbox and select the required domains.

    Add automatic assignment rule screen displaying how you can select directories and domains to define the eligibility criteria for users
    Choose users that will be eligible for automatic assignment of the selected product.

  6. Select Next and choose how your users will request access to a product. 

    • On-demand access: 
      • Allows eligible users to request access to a product from within an integrated Adobe application.
      • Generates a product access URL that can be shared with eligible users as an additional access point.
    • URL-only access:
      • Allows eligible users to request access only via a link provided by an administrator. This link can be shared via email, an internal site, or any other channel directly with the users.
    Note:

    Adobe recommends that you use URL-only Access in the following cases:

    • If you want to extend the option of automatic access to a subset of users.
    • If you want to share the option to request access, but hide it from the integrated Adobe app surfaces.
    • If the product associated with the rule doesn't support in-app requests and is not available in the Creative Cloud desktop app or Creative Cloud on the web (like Adobe Sign and Adobe Analytics). Here is a list of apps from which users can request access.

  7. Select Save.

    Upon requesting access or following the access URL, eligible users are automatically granted a license based on the settings chosen by the administrator. For on-demand access, if more than one rule applies to the requested product, the user is assigned all product profiles associated with rules for which they are eligible.

What happens when there are no more available licenses for a product?

  Teams contract or VIP contract with Team products:

  • System Administrators are shown a warning in the Admin Console to Buy More licenses. 
  • Administrators see an error in the Admin Console and receive an email notifying them that licenses are not available for an active rule when a user requests access to a product that has no available licenses. The requesting user is notified by email that no licenses are available to fulfill their request and that their organization's administrator has been made aware.
  • Users can re-request access to a product and are automatically granted access if more licenses have been added to their organization.

  VIP contract with Enterprise products:

  • System Administrators are shown a warning in the Admin Console to Buy More licenses. 
  • Administrators see an error in the Admin Console and receive an email notifying them that licenses are not available for an active rule when a user requests access to a product that has no available licenses. The requesting user is notified by email that no licenses are available to fulfill their request and that their organization's administrator has been made aware.
  • Users are automatically granted access in the order of their request, once more licenses are made available. The users are notified via email when they get access.
  • To view the list of pending users awaiting access, navigate to Admin Console > Products, choose a product, and select NO ACCESS. In the Users tab, administrators can check for users who no longer need access to the product, and remove them to free up licenses.
  Enterprise contract with Enterprise products:
  • If your contract allows over-delegation, licenses can be over-assigned beyond the number included in your contract.
  • Any eligible user who requests access or follows a product access URL receives automatic approval regardless of the number of licenses remaining in the organization.
Note:

This feature is only available if your organization uses Adobe storage for business, which is being rolled out globally in a phased manner.

Edit an automatic assignment rule

System Administrators can edit an existing assignment rule to generate a new product access URL or modify the following:

  Teams product: associated product and user access option

  Enterprise product: associated product, product profile, set of eligible users, and user access options

  1. Sign in to the Admin Console and navigate to Products > Product access automation > Automatic assignment rules.

  2. Select the Edit   icn icon for the relevant assignment rule.

  3. To generate a new product access URL, go to the Choose user access options screen and select Create new URL.

    Make the necessary changes and save the rule.

    Note:

    An administrator can choose to generate a new product access URL for an existing rule to prevent previous recipients of the URL from requesting access to a product license. Generating a new product access URL for an existing rule will make the previously generated URL invalid.

    Edit automatic assignment rule screen with the Create new URL button highlighted
    Select Create new URL to prevent previous recipients from requesting access.

Remove or pause an assignment rule

Pausing or removing a rule does not affect the users who have been previously provisioned a license via automated approval.

  1. Sign in to the Admin Console and navigate to Products > Product access automation > Automatic assignment rules.

  2. Select the checkbox for the relevant assignment rule.

  3. Select Pause or Remove. Pausing a rule deactivates it until resumed while removing a rule permanently deletes the rule and settings from the Admin Console.

  4. Confirm your selection in the dialog box that appears.

    You can choose to resume a paused rule whenever required.

Common errors

The following are common errors that may be experienced when creating, editing, or managing rules and how to mitigate them:

Error Description Impact Mitigation
Product Profile Has Been Removed If the product profile associated with a rule is deleted, the profile is removed from the rule and the status of the rule changes from Active to Pending.
 Users who request access to a rule in a Pending state will not receive access to a license until a profile is reassigned to the rule in which they are eligible.
 Assign another product profile to the rule.
Product Has Been Removed If a product is removed from the Admin Console, or the contract it is a part of expires, it is automatically removed from the rule. The status of the rule changes from Active to Pending.
 The product is not available for automatic assignment.
 Assign another Product to the rule.
One or More Domains Are Not Active If domains associated with a rule are no longer active, the domains in question are removed from the rule. The rule still applies to the other selected active domains. If none of the chosen domains for the rule are active, the status of the rule changes from Active to Pending.
 Users who were previously eligible for the rule based on their email domain are no longer eligible and will not be granted automated access to a license upon request.
 Update the affected domains or remove them from the list of eligible domains for the rule.
Select At Least One Domain If Choosing A Directory For Eligibility
 If no domain is selected when choosing a specific directory for user eligibility, an error is displayed.
 A rule can't be created or updated without a domain if you've selected Users in selected directories or domains as eligible users.
 Select a domain to proceed.
One or More Directories are Not Active If directories associated with a rule are no longer active, the directories in question are removed from the rule. The rule still applies to the other active directories previously added. If the chosen directory for the rule is not active, the status of the rule changes from Active to Pending.
 Users who were previously eligible for the rule based on their email domain are no longer eligible and will not be granted automated access to a license upon request.
 Update the affected directories or remove them from the list of eligible directories for the rule.
No Licenses Available If all available licenses for a product in a rule are in use, no additional licenses can be automatically assigned to eligible users who request access. This only applies to Team products within a Team or VIP contract or Enterprise products that are not eligible for over-provisioning.
 Users cannot gain access to the requested product until their administrator adds more licenses.
  • For enterprise products, purchase more licenses for the product, which will automatically provision a license to users who were previously approved for access and awaiting license availability. To view a list of pending users awaiting access, navigate to Admin Console > Products, choose a product, and select NO ACCESS.
  • For teams products, purchase more licenses for the product, then users can re-request access to the product and are automatically granted access if more licenses have been added.

Frequently asked questions

Why would I set up an automatic assignment rule instead of enabling product requests for my organization? 

Using automatic assignment rules is recommended if there is a product that the organization is willing to auto-approve and provision to a defined set of users. Product requests allow a System Administrator to first review a request prior to approving or denying based on the user’s needs.

Where can a user request access to a product from an administrator?

Users can request access to Adobe product licenses using the Creative Cloud desktop app or Creative Cloud on the web. The option appears based on the configurations established for each feature by their organization’s administrators. Adobe will continue to add more applications from which users can request access.

Can I have automatic assignment rules and product requests enabled simultaneously?

Automatic assignment rules for specific products can be set while the product requests are also enabled for an organization. The auto-assignment rule takes precedence if a user qualifies for a rule.

Why am I unable to choose directories or domains for user eligibility when setting up a rule?

The option to choose specific directories or domains for rule eligibility is only available when an enterprise product is chosen for the rule. The option to choose eligible users defaults to All Users in This Organization if the product selected is a teams product.

Why can I choose product profiles for some products and not others when setting up a rule?

Only enterprise products require selecting a product profile to create a rule.

What type of notifications do users receive when their request is automatically approved?

Users will receive an email notification confirming that their request is approved and another one when the license is available for use with their Adobe account.

What action do I take after receiving an email alerting me to purchase more licenses to continue automatically fulfilling requests?

If you receive an email alerting you to purchase more licenses, it means that an active rule has no more licenses available to automatically provision to requesting users’ accounts. Once more licenses are made available, users are granted access to a license either automatically or by re-requesting, based on the contract type the product is part of.

Will users still receive automated access to requested products if there are no licenses available for that product?

Users will not receive automated access to a requested product until an administrator makes more licenses available to fulfill outstanding requests for an automatic assignment rule.

What happens if I pause or remove a rule?

Pausing a rule deactivates it until resumed while removing a rule permanently deletes the rule and settings from the Admin Console. Pausing or removing a rule does not affect the users who were previously granted a license via automated approval.

 Adobe

Get help faster and easier

New user?

Quick links

View all your plans Manage your plans
View quick links
Hide quick links
Adobe MAX 2024

Adobe MAX
The Creativity Conference

Oct 14–16 Miami Beach and online

Register Now

Adobe MAX

The Creativity Conference

Oct 14–16 Miami Beach and online

Register Now
Adobe MAX 2024

Adobe MAX
The Creativity Conference

Oct 14–16 Miami Beach and online

Register Now

Adobe MAX

The Creativity Conference

Oct 14–16 Miami Beach and online

Register Now

Legal Notices    |    Online Privacy Policy