Manage permissions for a role

Permissions is the area of Experience Cloud where administrators can define user roles and access policies to manage access permissions for features and objects within a product application.

Through Permissions, you can create and manage roles, as well as assign the desired resource permissions for these roles. Permissions also allow you to manage the labels, sandboxes, and users associated with a specific role.

Immediately after creating a new role, you are returned to the Roles tab. If you are editing permissions for an existing role, select the role from the Roles tab. Alternatively, use the filter option to filter the results to find a role.

Filter roles

Select the funnel icon ( ) to display a list of filter controls to help narrow results.

The following filters are available for roles in the UI:

To remove a filter, select the “X” on the pill icon for the filter in question, or select Clear all to remove all filters.

Role details

Select the role from the Roles tab, which will open the role’s details page.

The details tab provides an overview of the role. The overview displays the role name, role description, the name of the user who created and modified the role, when the role was created and modified, and the permissions attached to the role. The role name, and role description can be modified, if required.

Manage labels for a role

Select the Labels tab to open the roles labels page, then select Add labels to assign labels to the role.

Labels are listed on this page. The list displays the label name, friendly name, category, and its description.

Select the labels from the list you would like to add to the role, then select Save

Added labels appear under Labels tab.

To remove a label from a role, select the X icon next to the labels’s name.

Managing sandboxes for role

Select the Sandboxes tab to open the roles sandboxes page. Here you can see a list of sandboxes that were added to the role.

To add more sandboxes to a role select Edit.

The next screen prompts you to choose which resource permissions that exist in sandboxes to include in the role using the dropdown. When finished, select Save and exit.

Managing users for role

Select the Users tab to open the roles users page, then select Add Users to assign users to the role.

Select the users from the list you would like to add to the role. Alternatively, use the search bar to search for the user by entering their name or email address, then select Save

Added users appear under Users tab.

To remove a user from a role, select the X icon next to the users name.

The following video is intended to support your understanding of creating a new role and managing users for that role.

Managing API credentials for role manage-api-credentials-for-role

Select the API credentials tab to open the roles API credentials page, then select Add API credentials to assign API credentials to the role.

Select the API credentials from the list you would like to add to the role, then select Save

Added API credentials appears under API credentials tab.

To remove a API credentials from a role, select the X icon next to the API credential name.

The Remove API credentials dialogue appears, prompting you to confirm deletion.

You will be returned to the API credentials tab.

Managing user groups for roles

User groups are multiple users that have been grouped together and have the access to execute the same functions.

Select the User groups tab to open the roles user groups page, then select Add Groups to assign user groups to the role.

Select the user groups from the list you would like to add to the role. Alternatively, use the search bar to search for the user group by entering the name of the group, then select Save

Added user group appears under User groups tab.

To remove a user group from a role, select the X icon next to the user group name.

The Remove user group dialogue appears, prompting you to confirm deletion.

You will be returned to the User groups tab.

Adding users to Experience Platform through a role

To add a user to a role, log into the Admin Console and select Add users

The Add users to your team dialogue appears. Enter the users email address, first name (optional) and last name (optional).

Select the pencil icon to select products and user groups, select Adobe Experience Platform, then select AEP-Default-All-Users, then select Save.

Next steps

With permissions established, you can proceed to the next step to manage users.