DocumentationExperience Cloud KCS

Enable Attribute Based Access Control (ABAC) in Adobe Experience Manager Dynamic Media test environments

Last update: August 18, 2026

This article explains how to enable Attribute Based Access Control (ABAC) in an Adobe Experience Manager (AEM) Dynamic Media test environment, including prerequisites and configuration steps.

Description description

Attribute Based Access Control (ABAC) allows organizations to restrict access to assets in AEM Dynamic Media based on asset metadata and user attributes. This feature isn’t enabled by default and requires specific onboarding and configuration steps, especially in test environments.

Environment

  • Adobe Experience Manager Dynamic Media (all versions)
  • Test environments where Dynamic Media with OpenAPI is enabled

Symptoms

  • Guidance is needed to enable ABAC to restrict access to certain assets based on metadata attributes.
  • No errors are present; this is a configuration request.

Cause

  • ABAC isn’t enabled by default and must be set up through onboarding steps and configuration of rules and attributes.

Resolution resolution

Follow the steps below to enable ABAC in your test environment:

  1. Ensure your test environment has Dynamic Media with OpenAPI enabled.

  2. Confirm you have administrative permissions for your AEM Dynamic Media tenant.

  3. Join the Adobe Beta Feedback Program to request access to the experimental ABAC APIs:

    • Visit the Adobe Beta Feedback Program site and complete the sign-up process.

  4. After joining, have your development team contact Adobe to request enablement of the Experimental APIs for your environment.

  5. Accept the invitation link you receive to proceed with API access.

  6. Once enabled, create a project at developer.adobe.com, and add the AEM Experimental APIs to your project. This will generate a clientID for API calls.

  7. Define the rules for asset access control based on asset metadata properties (For example: restricting access by region or group membership). Prepare a list of rules in plain text or spreadsheet format, as appropriate for your use case.

  8. Ensure all assets have the necessary metadata properties applied to support your ABAC rules.

  9. Test the ABAC configuration by logging in with a user account that matches the required attributes and verifying that access restrictions are enforced as expected.

  10. If you have issues during setup, collect relevant logs and configuration details and contact Adobe Support for further assistance.

recommendation-more-help
experience-cloud-kcs-help-kbarticles