Can you assign Administrative Roles to a synchronized Azure Group?

Question

Is there a method to add an Administrative Role to a synchronized group? We have a service desk that needs to log onto the administrator console and right now I am adding the users individually. We already assign licenses and products using synchronized Entra/Azure groups.  Can the same thing be done for the Admin Roles? These users are all added to an Azure group and removed when they leave- so a group makes more sense than a manual add.

Anshul_Nautiyal · Accepted Answer

Hi ​@PaulDangerThank you for reaching out.I have reviewed your account and can confirm that there is an active enterprise contract associated with the Adobe ID used to post this query. Based on your message, I understand that you would like to confirm whether administrative roles can be linked to a synchronized Azure (Entra ID) group so that admin access is automatically granted or revoked when users are added to or removed from the group. Please let me know if this accurately captures your requirement.At present, administrative roles cannot be directly assigned to synchronized Azure/Entra ID groups in the same way as product profiles or licenses.As a workaround, you may consider using the Adobe User Sync Tool. This tool allows administrative roles to be assigned to users through special group names and prefixes. With the appropriate naming conventions, admin roles can be managed similarly to product profiles or user groups. You can find more details in the following documentation:https://adobe.ly/3PKTwYdAlternatively, you can use the User Management API. However, please note that the API does not currently support assigning the System Admin role. As a result, System Admin roles cannot be managed through group mapping using this method. Additional information is available here:https://adobe.ly/4rEavswI hope this information is helpful. Please feel free to reach out if you need any further assistance.Regards,^AN

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.