Manage Users, Groups, and User Roles manage-users-groups-and-user-roles
Administrators can use Adobe Admin Console to create Experience Manager Assets Brand Portal users and Product Profiles, and manage their roles using the Brand Portal user interface. This privilege is not available to Viewers and Editors.
In Admin Console, you can view all the products associated with your organization. A product could be any Experience Cloud solution, such as Adobe Analytics, Adobe Target, or Experience Manager Assets Brand Portal. Choose the AEM Brand Portal product, and create Product Profiles.
These Product Profiles are synced with the Brand Portal user interface every 8 hours and visible as groups in Brand Portal. Once you add users and create Product Profiles, and add users to those Product Profiles, you can assign roles to users and groups in Brand Portal.
Add a user add-a-user
If you are a Product Administrator, use Adobe Admin Console to create users and assign them to Product Profiles (formerly known as product configurations), which show as groups in Brand Portal. You can use groups to perform bulk operations such as role management and asset sharing.
-
From the AEM toolbar at the top, click the Adobe logo to access administrative tools.
-
From the administrative tools panel, click Users.
-
In the User Roles page, click the Management tab, then click Launch Admin Console.
-
In the Admin Console, do one of the following to create a new user:
- From the toolbar at the top, click Overview. In the Overview page, click Assign Users from the Brand Portal product card.
- From the toolbar at the top, click Users. In the Users page, Users in the left rail are selected by default. Click Add User.
-
In the Add User dialog box, type the email ID of the user you want to add or select the user from the list of suggestions that appear when you type.
-
Assign the user to at least one product profile (formerly known as product configurations) so that the user can access Brand Portal. Select the appropriate product profile from the Please select a profile for this product field.
-
Click Save. A welcome email is sent to the newly added user. The invited user can click on the link in the welcome email to access Brand Portal. The user can log in using the email id (Adobe ID, Enterprise ID, or Federated ID) configured in the Admin Console. For more information, see First-time login experience.
note note NOTE If a user is unable to log on to Brand Portal, the Administrator of the organization should visit the Adobe Admin Console. Check whether the user is present and has been added to at least one product profile. For information about granting administrative privileges to the user, see Provide administrator privileges to users.
Add a product profile add-a-product-profile
Product profiles (formerly known as product configurations) in Admin Console are used to create groups in Brand Portal so that you can perform bulk operations such as role management and asset sharing in Brand Portal. Brand Portal is the default product profile available; you can create more Product Profiles and add users to the new Product Profiles.
-
From the AEM toolbar at the top, click the Adobe logo to access administrative tools.
-
From the administrative tools panel, click Users.
-
In the User Roles page, click the Management tab, then click Launch Admin Console.
-
From the toolbar at the top, click Products.
-
In the Products page, Product Profiles are selected by default. Click New Profile.
-
In the Create a New Profile page, provide the profile name, display name, and profile description. Choose to have users notified by email when they are added to or removed from the profile.
-
Click Done. The product configuration group. For example, the Sales group, is added to Brand Portal.
Add users to a product profile add-users-to-a-product-profile
To add users to a Brand Portal group, add them to the corresponding product profile (formerly known as product configurations) in the Admin Console. You can add users individually or in bulk.
-
From the toolbar at the top, click the Experience Manager logo to access administrative tools.
-
From the administrative tools panel, click Users.
-
In the User Roles page, click the Management tab, then click Launch Admin Console.
-
From the toolbar at the top, click Products.
-
In the Products page, Product Profiles are selected by default. Open the product profile to which you want to add a user, for example, Sales group.
-
To add individual users to the product profile, do the following:
- Click Add User.
- In the Add User to Sales group page, type the email ID of the user you want to add or select the user from the list of suggestions that appear as you type.
- Click Save.
-
To add bulk users to the product profile, do the following:
- Choose ellipsis (…) > Add users by CSV.
- In the Add Users by CSV page, download a CSV template or drag-and-drop a CSV file.
- Click Upload.
When you add users to the default product profile, Brand Portal, the system sends a welcome email to their email IDs. The invited users can then access Brand Portal by clicking the link in the welcome email and signing in with their Adobe ID. See First-time login experience.
Users added to a custom or a new product profile do not receive email notifications.
Provide administrator privileges to users provide-administrator-privileges-to-users
You can grant a Brand Portal user either System Administrator or Product Administrator privileges. However, avoid assigning other administrative roles available in the Admin Console. For example, product profile administrator, user group administrator, and support administrator. See Administrative roles.
-
From the AEM toolbar at the top, click the Adobe logo to access administrative tools.
-
From the administrative tools panel, click Users.
-
In the User Roles page, click the Management tab, then click Launch Admin Console.
-
From the toolbar at the top, click Users.
-
On the Users page, in the left rail, Users are selected by default. Click the user name of the user to whom you want to provide administrator privileges.
-
In the user profile page, locate the Administrative Rights section at the bottom, and choose ellipsis (…) > Edit admin rights.
-
In the Edit Admin page, select System Administrator or Product Administrator.
note note NOTE Brand Portal supports only System Administrator and Product Administrator roles. Adobe recommends that you avoid using the System Administrator role because it grants organization-wide administrator privileges for all the products of an organization. For example, a System Administrator of an organization that includes three cloud products for marketing, has the entire set of privileges for all three products. Only a System Administrator can configure Experience Manager Assets so that assets can be published from Experience Manager Assets to Brand Portal. For more information, see Configure Experience Manager Assets with Brand Portal. In contrast, the Product Administrator role grants administrator privileges for a specific product only. If you want to enforce a more granular access control within Brand Portal, use the Product Administrator role and select the product as Brand Portal. note note NOTE Brand Portal does not support product profile administrator (formerly known as configuration administrator) privileges. Avoid assigning product profile administrator rights to a user. -
Review the admin type selection and click Save.
note note NOTE To revoke administrator privileges for a user, make the appropriate changes in the Edit Admin page, and then click Save.
Manage user roles manage-user-roles
An Administrator can modify roles for users in Brand Portal.
In addition to the Administrator role, Brand Portal supports the following roles:
- Viewer: Users with this role can view the files and folders that an Administrator shares with them. Viewers can also search and download assets. However, Viewers cannot share content (files, folders, collections) with other users.
- Editor: Users with this role have all the privileges of a Viewer. In addition, Editors can share content (folders, collections, links) with other users.
-
From the AEM toolbar at the top, click the Adobe logo to access administrative tools.
-
From the administrative tools panel, click Users.
-
In the User Roles page, the Users tab is selected by default. For the user whose role you want to change, select Editor or Viewer from the Role drop-down.
To modify the role of multiple users simultaneously, select the users and choose the appropriate role from the Role drop-down.
note note NOTE The Role list for Administrator users is disabled. You cannot select these users to modify their roles. note note NOTE The user role is also disabled if the user is a member of the Editor group. To revoke editing privileges from the user, either remove the user from the Editor group or change the role of the entire group to Viewer. -
Click Save. The role is modified for the corresponding user. If you selected multiple users, the roles for all the users are modified simultaneously.
note note NOTE Changes in user permissions are reflected in the User Roles page only after the users re-login to Brand Portal.
Manage group roles and privileges manage-group-roles-and-privileges
An Administrator can associate specific privileges with a group of users on Brand Portal. The Groups tab on the User Roles page allows administrators to:
- Assign roles to user groups
- Restrict user groups to download original renditions of image files (.jpeg, .tiff, .png, .bmp, .gif, .pjpeg, x-portable-anymap, x-portable-bitmap, x-portable-graymap, x-portable-pixmap, x-rgb, x-xbitmap, x-xpixmap, x-icon, image/photoshop, image/x-photoshop, .psd, image/vnd.adobe.photoshop) from Brand Portal.
To modify the role and right to access original renditions for specific group members, follow these steps:
-
On the User Roles page, navigate to the Groups tab.
-
Select the groups for which you want to change roles.
-
Select the appropriate role from the Role drop-down list.
To let group members access original renditions of image files they download from the portal or shared link, keep the Access to Original option selected for that group. This approach includes file types such as the following:
- .jpeg
- .tiff
- .png
- .bmp
- .gif
- .pjpeg
- .psd
- x-portable-anymap
- x-portable-bitmap
- x-portable-graymap
- x-portable-pixmap
- x-rgb
- x-xbitmap
- x-xpixmap
- x-icon
- image/photoshop
- image/x-photoshop
- image/vnd.adobe.photoshop
By default, the Access to Original option is selected for all the users. To prevent a user group from accessing original renditions, deselect the option corresponding to that group.
note note NOTE If a user is added to multiple groups and if one of these groups has restrictions, the restrictions apply to that user. Also, any restrictions for accessing the original renditions of image files do not apply to administrators even though they are members of restricted groups. -
Click Save. The role is modified for the corresponding groups.
note note NOTE The user-to-group association, or the group membership of a user, is synced to Brand Portal every 8 hours. Changes to user or group roles are effective after the next sync job runs.