Add Users and Roles

Many features in Cloud Manager require specific permissions to use. For example, only certain users are allowed to set the key performance indicators (KPIs) for a program. These permissions are logically grouped into roles.

Cloud Manager currently defines four roles for users which govern the availability of specific features:

  • Business Owner
  • Program Manager
  • Deployment Manager
  • Developer
NOTE

To use Cloud Manager, you must have an Adobe ID and the Adobe Managed Services Product Context.

Role Definitions

This table summarizes the roles.

Cloud Manager Role Description
Business Owner This user is responsible for defining KPIs, approving production deployments, and overriding important 3-tier failures when necessary.
Program Manager This user uses Cloud Manager to perform team setup, review status, view KPIs, and can approve important 3-tier failures when necessary.
Deployment Manager This user manages deployment operations and uses Cloud Manager to execute staging/production deployments, edit CI/CD pipelines, approve important 3-tier failures when necessary, and can access the git repository.
Developer This user develops and tests custom application code and primarily uses Cloud Manager to view deployment status and can access the git repository for code commits.
Customer Success Engineer This user generally supports customer success for AMS customers and interacts with Cloud Manager for the purpose of executing deployments which require CSE oversight.
Content Author This user generally does not interact with Cloud Manager but may use the Cloud Manager program switcher to access AEM.
NOTE

The Developer persona in the Admin Console is unrelated to the Developer role in Cloud Manager.

Using Admin Console to Create a Profile

Cloud Manager roles are managed from the Admin Console. Specific role memberships are provided by adding the user to a Cloud Manager product profile.

The Admin Console is a central location for managing your Adobe entitlements across your entire organization. To learn more about the Adobe Admin Console, see the documentation for Admin Console.

In order to provide the appropriate role-based permissions to Cloud Manager users, an administrator in the customer’s organization must create new product profiles under the AEM Managed Services product context corresponding to each of the four Cloud Manager roles:

  • Business Owner
  • Deployment Manager
  • Developer
  • Program Manager

You can create or add users/groups to these product profiles with the Admin Console.

  1. Log in to the Admin Console at https://adminconsole.adobe.com.

  2. Click on the Overview tab, click on the product you want to modify on the Products and services card. If it is not listed there, use the Products tab to locate the product and click it.

    Admin console overview tab

  3. On the Products tab, click the environment for which you want to add users/groups to product profiles.

    Admin console products tab

  4. On the Product Profile tab of the product, click New Profile to add a new profile.

    New profile

  5. Provide the information to set up a new role for Cloud Manager.

    • Profile Name - The Profile Name can be anything, although to avoid confusion it is recommended to use the values in the Recommended Profile Name column.
    • Display Name - The Display Name must be the technical value defined by Cloud Manager (see the following table).
    • Permission Group - You may choose a permission group for the profile (not always available).

    Creating a new profile

    Role Display Name (Required) Recommended Profile Name
    Business Owner CM_BUSINESS_OWNER_ROLE_PROFILE Cloud Manager - Business Owner Role
    Deployment Manager CM_DEPLOYMENT_MANAGER_ROLE_PROFILE Cloud Manager - Deployment Manager Role
    Developer CM_DEVELOPER_ROLE_PROFILE Cloud Manager - Developer Role
    Program Manager CM_PROGRAM_MANAGER_ROLE_PROFILE Cloud Manager - Program Manager Role

  6. Click Done to save the new profile.

Assign Profiles to Users or User Groups

Once you have created product profiles, you can assign users or user groups to them.

  1. Log in to the Admin Console at https://adminconsole.adobe.com.

  2. In the Admin Console, choose the Users tab.

    Users tab

  3. Click on Users in the left navigation panel and then click on a user to modify it.

  4. Click on the ellipsis button in the Products section and select Edit.

    Edit user

  5. In the Edit products and user groups dialog, click the plus button and select the profiles to assign to the user.

    • If the user already is assigned to the roles, the plus button will be an edit button (a pencil), but works the same way.

    Edit products and user groups

  6. Click Save to save the profiles to the user.

Repeat the same steps to assign profiles to user groups, but select User Groups from the left navigation panel on the Users tab. Click on a user group and select the Assigned Product Profiles tab and click Assign Product Profile to assign profiles.

Assign profiles to group

On this page