Learn about administration activities for Experience Platform, including permission and sandbox management. For more information, please visit the Access control documentation.
Adobe Experience Platform provides a versatile suite of technologies that enable marketers, developers, data analysts, and data scientists to gain powerful insights into customer interactions with their brands and services. To accommodate these varying roles within your business, Adobe AdminConsole allows you to control granular access to specific platform features and capabilities, depending on a user’s role. In this video, we’re going to introduce Adobe AdminConsole and how it can provide role-based access control for your platform users.
Adobe AdminConsole provides a central location for managing your Adobe product entitlements across your entire organization. From the overview page in AdminConsole, we can quickly see which products and services our organization has licenses for, the number of users, admins, and developers that belong to our organization, and some quick links to add new users to these various roles. To start, let’s talk about products and product profiles. When your organization purchases products from Adobe, these products appear under the products tab in AdminConsole. Each available product allows you to entitle your users for the services and capabilities it provides. From here, we can see at a glance how many users are entitled to each product. If a product contains multiple apps, we can also see how many of those apps our organizations have licenses for. Let’s open the product page for Adobe Experience Platform to see some more details. Here we see that each product can have multiple product profiles. You can think of a product profile as a configured set of permissions for a product. By adding users to a product profile, those users are entitled to the services and features provided by the profile. Depending on its configuration, a product profile can grant access to all capabilities for a product or just a few. You can configure multiple product profiles to provide different sets of permissions to different sets of users. More information about configuring product profiles and permissions is covered in a future video. For now, let’s back up and talk about users. In AdminConsole users fall into three categories. Administrators are users in your organization who can configure access to products, product profiles, or the organization itself, depending on their admin level. We’ll talk more about the different admin types later in this video. End users are the users in your organization who use the Adobe products and services that you have licenses for. The specific features they have access to are determined by the user groups and product profiles they’ve been added to by an admin. More on user groups later. Finally, developers are users who are able to build API integrations through Adobe I/O in order to create or expand apps and experiences based on Adobe’s products and technologies. When an admin assigns a developer to a product profile, that developer can generate API credentials for that product. Managing products and permissions on a user by user basis can quickly become time consuming in large organizations. To help streamline this process, AdminConsole allows you to define User Groups. A User Group is a collection of different users that have a shared set of permissions. By creating a User Group that contains all of the members of the department, for example, an administrator can simply add and remove users from the group instead of assigning permissions to individual users each time the department changes. Now that we’re a bit more familiar with users and products in AdminConsole, the last thing we’ll go over are the different admin roles in a given organization.
At the top of the admin hierarchy is the System Administrator. System Admins are basically super users for an organization and are allowed to perform all administrative tasks in AdminConsole. An organization can have multiple System Admins. A Product admin performs admin tasks for one or more products they’ve been assigned to by a System Admin. This includes creating product profiles, adding users and User Groups to those profiles, and adding other Product admins. By extension a Product Profile admin performs tasks for one or more Product Profiles. Unlike a Product admin, these admins cannot control other product profiles that they have not been given access to. Finally, a User Group admin controls one or more groups in an organization, meaning they can add or remove users and admins from those groups. Unless they are also a Product admin or Product Profile admin, however, a User Group admin cannot assign a User Group to a Product Profile. By watching this video, you’ve now been introduced to the basic components of AdminConsole and how they work to link users with Adobe products and services.
For more information on how to manage users, products, and permissions for Experience Platform in AdminConsole, refer to the video tutorials or the official documentation for platform access control. Thanks for watching. -