Adobe admin portal role assignment improvement

[defaultvtjyx9v8b7yr]

To simplicity managment of administrators in one place, it would be ideal if we could manage administrators in the Adobe Admin console in the same way we manage Licence assignment when syncing identities from Azure AD

To be more specific, it would be ideal if we could automatically set all users that are in a specific Group that is synced from Azure AD as administrators (or any othe role) automatically in the Adobe Admin portal the same way we are able to assign licneces.

The current proces involves syncing users to the Adobe Admin portal (via a dedicated group) and then manually assigning the administrator role once the user has syncronised.

In a large organisation with many technical staff (oftent transient) that often need to log into the Adobe portal to troubleshoot this it means we need to remember to manually provsion each user instead of just letting our identiy managment platform handle that automatically. 

[Brad__]

+1. I came here for this exact reason.

Further to the above, by implementing RBAC, organizations can establish a clear and granular control mechanism, granting administrative privileges only to authorized individuals based on their designated roles. This approach enhances security by minimizing the risk of unauthorized access, privilege escalation, and potential insider threats. RBAC ensures that administrative tasks are performed by individuals who have undergone appropriate vetting and possess the necessary skills and qualifications, reducing the likelihood of human error and intentional misuse of privileges.

[Zachery5F93]

Adobe, please make this a top priority to deliver. Especially for enterprise customers. We've asked for this repeatedly over the last 4 years. Enterprise administrators cannot justify unconstrained access to administrative consoles to their risk teams, compliance officers, or regulators.

[Amy_Greenz]

I completely get where you’re coming from. In my own experience, the manual step of assigning admin roles after syncing from Azure AD feels like an unnecessary extra process. Especially in larger organizations, where staff turnover is constant, it’s easy to miss a step or delay access when someone needs it quickly.

If admin roles could be handled the same way as license assignments — directly from group membership in Azure AD — it would save time, reduce mistakes, and keep identity management centralized. That’s exactly the type of automation I’d like to see in the Adobe Admin Console.

From my point of view, letting the identity platform remain the single source of truth is the cleanest approach. The less we need to manually intervene, the smoother the workflow and the less risk of errors when people are in and out of technical roles.

[Zachery5F93]

Couldn't agreee more. Adobe, please get this on your roadmap.