Permissions management permissions-management
Every organization needs to control who can view, edit, or delete assets, especially as more teams and outside partners request access. AEM Assets manages this through group-based permissions, so you assign access by role, not one user at a time. Group-based permissions in the Assets view and the Admin view keep sensitive content secure while the right people still work fast.
Learn how to manage folder permissions in the Assets view so the right users and groups can view, edit, or manage your assets. Before you begin, set up users and user groups in the Adobe Admin Console, then sign in to AEM Assets as an administrator.
Select a folder, open More options, and choose Manage permissions. This video shows how to:
- Assign Can view or Can edit permissions to user groups.
- Give a group view access to a parent folder and edit access to a specific subfolder.
- Assign Owner permission to an individual user so they can manage permissions within a folder tree without being a full administrator.
- Apply Deny access to All authenticated users to restrict a folder to the groups you explicitly grant access to, and acknowledge the warning that this change may affect your own permissions.
Manage permissions at the group level rather than for individual users, except when assigning a folder owner. Permissions apply to both browsing and search results, so users only see assets they have permission to access.
| embed |
|---|
| https://video.tv.adobe.com/v/3504763?quality=12&learn=on |
| video-transcript |
|---|
| https://video.tv.adobe.com/vc/3504763/eng.json |
In the Admin view, you create a custom user group for each role and make it a member of an AEM-provided group, such as Contributors, DAM users, or Workflow users, so it inherits a baseline set of permissions instead of a rebuild from scratch. Then you layer access control lists (ACLs) on top for specific folders. This video walks through a worked example, configured from Tools > Security: deny a creatives group write access at the root, then grant it in one subfolder.
| embed |
|---|
| https://video.tv.adobe.com/v/37696?quality=12&learn=on |
| video-transcript |
|---|
| https://video.tv.adobe.com/vc/37696/eng.json |