Add users and roles add-users-and-roles

Many features in Cloud Manager require specific permissions to use. For example, only certain users are allowed to set the key performance indicators (KPIs) for a program. These permissions are logically grouped into roles.

Cloud Manager currently defines four roles for users, which govern the availability of specific features:

  • Business Owner
  • Program Manager
  • Deployment Manager
  • Developer
NOTE
To use Cloud Manager, you must have an Adobe ID and the Adobe Managed Services Product Context.

Role definitions role-definitions

The following table summarizes the roles in Cloud Manager.

Cloud Manager role
Description
Business Owner
Responsible for defining KPIs, approving production deployments, and overriding important 3-tier failures when necessary.
Program Manager
They use Cloud Manager to perform team setup, review status, view KPIs, and can approve important 3-tier failures when necessary.
Deployment Manager
Manages deployment operations and uses Cloud Manager to execute staging and production deployments, edit CI/CD pipelines, and approve critical 3-tier failures when necessary. They also have access to the Git repository.
Developer
Develops and tests custom application code and primarily uses Cloud Manager to view deployment status and can access the Git repository for code commits.
Customer Success Engineer
The CSE generally supports customer success for AMS customers. They interact with Cloud Manager for the purpose of executing deployments that require CSE oversight.
Content Author
They generally do not interact with Cloud Manager but may use the Cloud Manager program switcher to access AEM.
NOTE
The Developer persona in the Admin Console is unrelated to the Developer role in Cloud Manager.

Create a profile using the Admin Console using-admin-console-to-create-a-profile

Cloud Manager roles are managed from the Admin Console. Specific role memberships are provided by adding the user to a Cloud Manager product profile.

The Admin Console is a central location for managing your Adobe entitlements across your entire organization. To learn more about the Adobe Admin Console, see Admin Console.

An administrator must create new product profiles under the AEM Managed Services Product Context to assign role-based permissions for Cloud Manager users, corresponding to each of the four Cloud Manager roles.

  • Business Owner
  • Deployment Manager
  • Developer
  • Program Manager

You can create or add users or groups to these product profiles with the Admin Console.

  1. Log in to the Admin Console at https://adminconsole.adobe.com.

  2. Click the Overview tab, then click the product you want to edit on the Products and Services card. If it is not listed there, use the Products tab to locate the product and click it.

    Admin console overview tab

  3. On the Products tab, click the environment for which you want to add users/groups to product profiles.

    Admin console products tab

  4. On the Product Profile tab of the product, click New Profile to add a new profile.

    New profile

  5. Provide the information to set up a new role for Cloud Manager.

    • Profile Name - The Profile Name can be anything, although to avoid confusion it is recommended to use the values in the Recommended Profile Name column.
    • Display Name - The Display Name must be the technical value defined by Cloud Manager (see the following table).
    • Permission Group - You may choose a permission group for the profile (not always available).

    Creating a new profile

    table 0-row-3 1-row-3 2-row-3 3-row-3 4-row-3
    Role Display Name (Required) Recommended Profile Name
    Business Owner CM_BUSINESS_OWNER_ROLE_PROFILE Cloud Manager - Business Owner Role
    Deployment Manager CM_DEPLOYMENT_MANAGER_ROLE_PROFILE Cloud Manager - Deployment Manager Role
    Developer CM_DEVELOPER_ROLE_PROFILE Cloud Manager - Developer Role
    Program Manager CM_PROGRAM_MANAGER_ROLE_PROFILE Cloud Manager - Program Manager Role
  6. Click Done to save the new profile.

Assign profiles to users or user groups assign-profiles

Once you have created product profiles, you can assign users or user groups to them.

  1. Log in to the Admin Console at https://adminconsole.adobe.com.

  2. In the Admin Console, choose the Users tab.

    Users tab

  3. Click Users in the left navigation panel and then click a user to modify it.

  4. Click the ellipsis button in the Products section and select Edit.

    Edit user

  5. In the Edit products and user groups dialog box, click the plus button and select the profiles to assign to the user.

    • If the user already is assigned to the roles, the plus button is an edit button (a pencil), but works the same way.

    Edit products and user groups

  6. Click Save to save the profiles to the user.

Repeat the same steps to assign profiles to user groups, but select User Groups from the left navigation panel on the Users tab. Click a user group and select the Assigned Product Profiles tab and click Assign Product Profile to assign profiles.

Assign profiles to group

recommendation-more-help
c6cdc82b-cee9-48e0-a6ee-48149d5e72c3