Manage Users, Groups, and User Roles manage-users-groups-and-user-roles

Administrators can use Adobe Admin Console to create Experience Manager Assets Brand Portal users and Product Profiles, and manage their roles using the Brand Portal user interface. This privilege is not available to Viewers and Editors.

In Admin Console, you can view all the products associated with your organization. A product could be any Experience Cloud solution, such as Adobe Analytics, Adobe Target, or Experience Manager Assets Brand Portal. Choose the AEM Brand Portal product, and create Product Profiles.

These Product Profiles are synced with the Brand Portal user interface every 8 hours and visible as groups in Brand Portal. Once you add users and create Product Profiles, and add users to those Product Profiles, you can assign roles to users and groups in Brand Portal.

NOTE
To create groups in Brand Portal, from Adobe Admin Console, use Products > Product Profiles, instead of User page > User Groups. Product profiles in Adobe Admin Console are used to create groups in Brand Portal.

Add a user add-a-user

If you are a Product Administrator, use Adobe Admin Console to create users and assign them to Product Profiles (formerly known as product configurations), which show as groups in Brand Portal. You can use groups to perform bulk operations such as role management and asset sharing.

NOTE
New users who do not have access to Brand Portal can request access from the login screen of Brand Portal. For more information, refer to Request access to Brand Portal. After you receive access request notifications in your notification area, click the relevant notification and then click Grant Access. Alternatively, follow the link in the access request email received. Next, to add a user through Adobe Admin Console, follow Steps 4-7 in the procedure below.
NOTE
You can log in to Adobe Admin Console directly or from Brand Portal. If you log in directly, follow steps 4-7 below to add a user.
  1. From the AEM toolbar at the top, click the Adobe logo to access administrative tools.

    AEM logo

  2. From the administrative tools panel, click Users.

    Admin tools panel

  3. In the User Roles page, click the Management tab, then click Launch Admin Console.

    User Roles to launch Admin Console

  4. In the Admin Console, do one of the following to create a new user:

    • From the toolbar at the top, click Overview. In the Overview page, click Assign Users from the Brand Portal product card.

    Admin Console Overview

    • From the toolbar at the top, click Users. In the Users page, Users in the left rail are selected by default. Click Add User.

    Admin Console Add users

  5. In the Add User dialog box, type the email ID of the user you want to add or select the user from the list of suggestions that appear when you type.

    Add user to Brand Portal

  6. Assign the user to at least one product profile (formerly known as product configurations) so that the user can access Brand Portal. Select the appropriate product profile from the Please select a profile for this product field.

  7. Click Save. A welcome email is sent to the newly added user. The invited user can click on the link in the welcome email to access Brand Portal. The user can log in using the email id (Adobe ID, Enterprise ID, or Federated ID) configured in the Admin Console. For more information, see First-time login experience.

    note note
    NOTE
    If a user is unable to log on to Brand Portal, the Administrator of the organization should visit the Adobe Admin Console. Check whether the user is present and has been added to at least one product profile.

    For information about granting administrative privileges to the user, see Provide administrator privileges to users.

Add a product profile add-a-product-profile

Product profiles (formerly known as product configurations) in Admin Console are used to create groups in Brand Portal so that you can perform bulk operations such as role management and asset sharing in Brand Portal. Brand Portal is the default product profile available; you can create more Product Profiles and add users to the new Product Profiles.

NOTE
You can log in to Admin Console directly or from Brand Portal. If your login to the Admin Console directly, follow Steps 4-7 in the procedure below to add a product profile.
  1. From the AEM toolbar at the top, click the Adobe logo to access administrative tools.

    AEM Logo

  2. From the administrative tools panel, click Users.

    Admin tools panel

  3. In the User Roles page, click the Management tab, then click Launch Admin Console.

    Launch Admin Console

  4. From the toolbar at the top, click Products.

  5. In the Products page, Product Profiles are selected by default. Click New Profile.

    Add new Product Profile

  6. In the Create a New Profile page, provide the profile name, display name, and profile description. Choose to have users notified by email when they are added to or removed from the profile.

    Create Product Profile

  7. Click Done. The product configuration group. For example, the Sales group, is added to Brand Portal.

    Product profiles

Add users to a product profile add-users-to-a-product-profile

To add users to a Brand Portal group, add them to the corresponding product profile (formerly known as product configurations) in the Admin Console. You can add users individually or in bulk.

NOTE
You can log in to Admin Console directly or from Brand Portal. If your login to the Admin Console directly, follow Steps 4-7 in the procedure below to add users to a product profile.
  1. From the toolbar at the top, click the Experience Manager logo to access administrative tools.

    AEM Logo

  2. From the administrative tools panel, click Users.

    Admin tools panel

  3. In the User Roles page, click the Management tab, then click Launch Admin Console.

    Launch Admin Console

  4. From the toolbar at the top, click Products.

  5. In the Products page, Product Profiles are selected by default. Open the product profile to which you want to add a user, for example, Sales group.

    Product profiles

  6. To add individual users to the product profile, do the following:

    • Click Add User.

    Group to map Product Profile in Brand Portal

    • In the Add User to Sales group page, type the email ID of the user you want to add or select the user from the list of suggestions that appear as you type.

    Add user to a group

    • Click Save.
  7. To add bulk users to the product profile, do the following:

    • Choose ellipsis (…) > Add users by CSV.

    Add users in bulk

    • In the Add Users by CSV page, download a CSV template or drag-and-drop a CSV file.

    Add users by csv

    • Click Upload.

    When you add users to the default product profile, Brand Portal, the system sends a welcome email to their email IDs. The invited users can then access Brand Portal by clicking the link in the welcome email and signing in with their Adobe ID. See First-time login experience.

    Users added to a custom or a new product profile do not receive email notifications.

Provide administrator privileges to users provide-administrator-privileges-to-users

You can grant a Brand Portal user either System Administrator or Product Administrator privileges. However, avoid assigning other administrative roles available in the Admin Console. For example, product profile administrator, user group administrator, and support administrator. See Administrative roles.

NOTE
You can log in to Admin Console directly or from Brand Portal. If your login to the Admin Console directly, follow Steps 4-8 in the procedure below to add a user to a product profile.
  1. From the AEM toolbar at the top, click the Adobe logo to access administrative tools.

    AEMLogo

  2. From the administrative tools panel, click Users.

    Admin tools panel

  3. In the User Roles page, click the Management tab, then click Launch Admin Console.

    Launch Admin Console

  4. From the toolbar at the top, click Users.

  5. On the Users page, in the left rail, Users are selected by default. Click the user name of the user to whom you want to provide administrator privileges.

    Add Users in Admin Console

  6. In the user profile page, locate the Administrative Rights section at the bottom, and choose ellipsis (…) > Edit admin rights.
    Admin rights in Admin Console

  7. In the Edit Admin page, select System Administrator or Product Administrator.

    Edit admin rights in Admin Console

    note note
    NOTE
    Brand Portal supports only System Administrator and Product Administrator roles.
    Adobe recommends that you avoid using the System Administrator role because it grants organization-wide administrator privileges for all the products of an organization. For example, a System Administrator of an organization that includes three cloud products for marketing, has the entire set of privileges for all three products. Only a System Administrator can configure Experience Manager Assets so that assets can be published from Experience Manager Assets to Brand Portal. For more information, see Configure Experience Manager Assets with Brand Portal.
    In contrast, the Product Administrator role grants administrator privileges for a specific product only. If you want to enforce a more granular access control within Brand Portal, use the Product Administrator role and select the product as Brand Portal.
    note note
    NOTE
    Brand Portal does not support product profile administrator (formerly known as configuration administrator) privileges. Avoid assigning product profile administrator rights to a user.
  8. Review the admin type selection and click Save.

    note note
    NOTE
    To revoke administrator privileges for a user, make the appropriate changes in the Edit Admin page, and then click Save.

Manage user roles manage-user-roles

An Administrator can modify roles for users in Brand Portal.

In addition to the Administrator role, Brand Portal supports the following roles:

  • Viewer: Users with this role can view the files and folders that an Administrator shares with them. Viewers can also search and download assets. However, Viewers cannot share content (files, folders, collections) with other users.
  • Editor: Users with this role have all the privileges of a Viewer. In addition, Editors can share content (folders, collections, links) with other users.
  1. From the AEM toolbar at the top, click the Adobe logo to access administrative tools.

    AEMLogo

  2. From the administrative tools panel, click Users.

    Admin tools panel

  3. In the User Roles page, the Users tab is selected by default. For the user whose role you want to change, select Editor or Viewer from the Role drop-down.

    Modify users roles

    To modify the role of multiple users simultaneously, select the users and choose the appropriate role from the Role drop-down.

    note note
    NOTE
    The Role list for Administrator users is disabled. You cannot select these users to modify their roles.
    note note
    NOTE
    The user role is also disabled if the user is a member of the Editor group. To revoke editing privileges from the user, either remove the user from the Editor group or change the role of the entire group to Viewer.
  4. Click Save. The role is modified for the corresponding user. If you selected multiple users, the roles for all the users are modified simultaneously.

    note note
    NOTE
    Changes in user permissions are reflected in the User Roles page only after the users re-login to Brand Portal.

Manage group roles and privileges manage-group-roles-and-privileges

An Administrator can associate specific privileges with a group of users on Brand Portal. The Groups tab on the User Roles page allows administrators to:

  • Assign roles to user groups
  • Restrict user groups to download original renditions of image files (.jpeg, .tiff, .png, .bmp, .gif, .pjpeg, x-portable-anymap, x-portable-bitmap, x-portable-graymap, x-portable-pixmap, x-rgb, x-xbitmap, x-xpixmap, x-icon, image/photoshop, image/x-photoshop, .psd, image/vnd.adobe.photoshop) from Brand Portal.
NOTE
For the assets shared as the link, the permission to access original renditions of image files apply based on the permissions of the user who is sharing the assets.

To modify the role and right to access original renditions for specific group members, follow these steps:

  1. On the User Roles page, navigate to the Groups tab.

  2. Select the groups for which you want to change roles.

  3. Select the appropriate role from the Role drop-down list.

    To let group members access original renditions of image files they download from the portal or shared link, keep the Access to Original option selected for that group. This approach includes file types such as the following:

    • .jpeg
    • .tiff
    • .png
    • .bmp
    • .gif
    • .pjpeg
    • .psd
    • x-portable-anymap
    • x-portable-bitmap
    • x-portable-graymap
    • x-portable-pixmap
    • x-rgb
    • x-xbitmap
    • x-xpixmap
    • x-icon
    • image/photoshop
    • image/x-photoshop
    • image/vnd.adobe.photoshop

    By default, the Access to Original option is selected for all the users. To prevent a user group from accessing original renditions, deselect the option corresponding to that group.

    User group roles

    note note
    NOTE
    If a user is added to multiple groups and if one of these groups has restrictions, the restrictions apply to that user.
    Also, any restrictions for accessing the original renditions of image files do not apply to administrators even though they are members of restricted groups.
  4. Click Save. The role is modified for the corresponding groups.

    note note
    NOTE
    The user-to-group association, or the group membership of a user, is synced to Brand Portal every 8 hours. Changes to user or group roles are effective after the next sync job runs.
recommendation-more-help
4a60ca76-1c10-45cf-87aa-95ab647d0ca3