Copy link to clipboard
Copied
We recently upgraded our Adobe Acrobat licenses to an Enterprise account and are trying to apply least privilege access. The minimum role needed for a help desk member to manage users is "User Group Admin", but this group still allows its members to assign this role to other members. This seems counter-intuitive to allow user managers to be able to delegate the same role to as many other people as they wish. Shouldn't assigning role membership be limited to the System Admin role?
Also, any possibility of allowing System Admins to create custom roles with granular permissions and the ability to turn off notifications for role changes?
For reference see this document: Administrative roles
Copy link to clipboard
Copied
Hi @H28505015eber,
Thank you for reaching out and sharing your feedback regarding administrative roles within the Adobe Admin Console.
Please note that User Group Administrators can only manage the user groups explicitly assigned to them, along with the associated administrative functions. These functions include:
Adding or removing users from the groups assigned to them
Assigning or removing other User Group Admins within their assigned groups
They do not have access to manage users or groups outside of their scope.
At this time, the Adobe Admin Console does not support the creation of custom administrative roles with granular permissions, nor is there an option to disable notifications for role changes.
We appreciate your thoughtful feedback, and I will ensure it is shared with the relevant internal teams for future consideration. Your input is valuable in helping us improve the product experience.
Please feel free to reach out if you have any further questions or suggestions.
Regards,
^AN
Find more inspiration, events, and resources on the new Adobe Community
Explore Now