Manage permissions for Privacy Service

Access to Adobe Experience Platform Privacy Service is controlled through granular role-based permissions in Adobe Admin Console. By creating product profiles that assign permissions to groups of users, you can determine who has access to which features in the Privacy Service UI and API.

This guide shows you how to manage permissions for Privacy Service.

Getting started

In order to configure access control for Privacy Service, you must have administrator privileges for an organization that has a product integration with Adobe Experience Platform Privacy Service. The minimum role that can grant or withdraw permissions is a product profile administrator. Other administrator roles that can manage permissions are product administrators (can manage all profiles within a product) and system administrators (no restrictions). See the article on administrative roles in the Adobe Enterprise administration guide for more information.

This guide assumes you are familiar with basic Admin Console concepts like product profiles and how they grant product permissions to individual users and groups. For more information, see the Admin Console user guide.

Available permissions

The following table outlines the available permissions for Privacy Service with descriptions of the specific capabilities that they grant access to:

Manage permissions manage

To manage Privacy Service permissions, log in to Admin Console and select Products from the top navigation. From here, select Adobe Experience Platform Privacy Service.

Select or create a product profile

The next screen shows a list of available product profiles for Privacy Service under your organization. If no product profiles exist, select New Profile to create one. If you have multiple roles or user groups in your organization that require different levels of access, you should create a separate product profile for each of them.

After selecting a product profile, you can use the Permissions tab to start editing permissions for the profile, or select the Users tab to start assigning users to the profile.

Edit permissions for the profile edit-permissions

On the Permissions tab, select any of the displayed permission categories to access the permission editing view.

When editing permissions for a profile, available permissions are listed in the left column while those that are included in the profile are listed in the right column. Select the listed permissions to move them between either column.

Permissions are organized into categories. To switch between categories, select the desired category from the left navigation.

Select Save once you have finished configuring permissions.

The product profile view reappears with the added permissions reflected.

Assign users to the profile assign-users

To assign users to the product profile (and grant them the profile’s configured permissions), select the Users tab, followed by Add user.

For more information on managing users for a product profile, see the Admin Console documentation.

Migrate legacy API credentials to the profile migrate-tech-accounts

Previously, technical accounts did not require a product profile for integration and permissions. However, due to recent improvements in Privacy Service permissions, it is now necessary to migrate legacy API credentials to the product profile. This update allows for granular permissions to be granted to technical account holders. Follow the steps provided below to update technical account permissions for Privacy Service.

Update technical account permissions update-tech-account-permissions

The first step in assigning a permission set for your technical account is to navigate to the Adobe Admin Console and create a new product profile for Privacy Service.

From the Admin Console UI, select Products from the navigation bar, followed by Experience Cloud and Adobe Experience Platform Privacy Service in the left sidebar. The Product Profiles tab appears. Select New Profile to create a new product profile for Privacy Service.

The Create a new product profile dialog appears. Full instructions on how to create a product profile can be found in the UI guide to create profiles.

After you have saved your new product profile, navigate to the Adobe Developer Console and log into that product or that project. Select Projects from the top navigation, followed by the card for your project.

After you have logged into your project, select the Privacy Service API integration from the left sidebar.

The Privacy Service API integration dashboard appears. From this dashboard, you can edit the product profile associated with that project. Select Edit product profiles to begin the process. The Configure API dialog appears.

The Configure API dialog shows the available product profiles that currently exist in the service. They correlate to the product profiles created in the admin console. From the list of available product profiles, select the checkbox for the new product profile you created for the technical account in the admin console. This automatically associates this technical account with the permissions in the selected product profile. Select Save configured API to confirm your settings.

Confirm your settings have been applied confirm-applied-settings

To confirm that your settings have been applied to the account. Return to the Admin Console and navigate to your newly created product profile. Select the API Credentials tab to see a list of associated projects. The project used in Developer Console where you assigned the product profile to the technical account is displayed in the list of credentials. The name of each API credential is composed of the project name with a randomly generated number suffixed to the end. Select a credential to open the Details panel.

The Details panel contains information on the API credential including the associated technical ID, the API key, created and last modified date, as well as associated Adobe Products.

Next steps

This guide covered the available permissions for Privacy Service and how to manage them through Admin Console.

For steps on how to create a new API integration after setting up product profiles, see the getting started guide for the Privacy Service API. For more information on managing permissions for other Adobe Experience Platform capabilities, refer to the access control documentation.