Show Menu
TOPICS×

Configure permissions

In this lesson, you will configure Adobe Experience Platform user permissions using Adobe's Admin Console.
Access control is a key privacy capability in Experience Platform and we recommend limiting permissions to the minimum required for people to perform their job functions.
Data Architects and Data Engineers are power users of Adobe Experience Platform and you will need almost all permissions in order to complete this tutorial, and later in your day-to-day work. Data Architects are likely be involved in the administration of other Platform users at their company such as marketers, analysts, and data scientists. As you complete this lesson, think about how you might use these features to manage other users at your company.
Data Architects will need to configure permissions outside of this tutorial.
A System Administrator of Adobe Experience Cloud products will need to complete some of the steps in this lesson, which we have called out in the section headings. If you are not System Administrator, please reach out to one at your company and have them complete these tasks.

About the Admin Console

The Admin Console is the interface used to administer user access to all Adobe Experience Cloud products. Some key Admin Console concepts to be aware of:
  • A product profile is a combination of permissions, roles, and sandbox environments tied to a specific Adobe product. Multiple product profiles can be created for a single Adobe product. For example, a "Marketer" profile could limit permissions to what a typical marketer would need to complete key tasks in the production instance, while a "Data Architect" profile could be used to grant different permissions in multiple environments. In this lesson, we will create a "Luma Tutorial" product profile with all the permissions a Data Architect and Data Engineer would need to complete this tutorial in a sandbox environment.
  • An integration is a connection to a project in the Adobe Developer Console. The Adobe Developer Console is the heart of authentication and configuration of Adobe APIs. You will configure an integration in the Developer Console and Postman lesson.
Also, here is a quick summary of the roles that exist for Platform, as well as any Adobe Experience Cloud application:
  • Users must be a member of a product profile can complete tasks in Platform's user interface according to the permissions in their product profile(s). Users can also be assigned to User Groups, to streamline management.
  • Developers must also be a member of product profile can complete the tasks using Platform's API according to the permissions in the product profile.
  • Product Profile Admins can edit that specific profile's permissions and services as well as add users, additional profile admins, and developers. Potentially a product profile admin can give themselves access to all capabilities of the product, with the exception of administering other product profiles.
  • Product Admins can administer all product profiles for that Adobe product and add new product profiles.
  • System Administrators can add product admins and administer essentially any permissions for all Adobe Experience Cloud products.

Create an Experience Platform product profile (requires a system administrator or product admin)

In this exercise you or a System Administrator at your company will create a product profile for Adobe Experience Platform and add you as an admin for that product profile.
If you are a System Administrator facilitating the enablement of a colleague, consider adding them as a Product Administrator for Adobe Experience Platform, in which case they would be able to complete these steps on their own and administrate other users of Experience Platform in the future.
To create the product profile:
  1. Click Products on the top navigation
  2. Click Adobe Experience Platform on the left navigation
  3. You probably already have several profiles in your Experience Platform instance. Click the New Profile button to add another
  4. Name the profile Luma Tutorial Platform (add the tutorial taker's name to the end, if multiple people from your company are taking this tutorial) and click the Next button
  5. On the Services screen, click the "All on" checkbox to remove all services. The tutorial participant will reenable what is needed in a later exercise.
  6. At this point the profile is created. Permission items will be added in a later exercise, so on the Configure profile screen, just hit the Cancel button.
Now you need to add the tutorial participant as an admin of the newly created product profile:
  1. Click on the Luma Tutorial Platform product profile:
  2. Click on the Admin tab and then click the Add Admin button:
  3. Complete the workflow to add the tutorial participant as an admin.
After completing these steps you should see that the Luma Tutorial Platform profile is set up with 1 admin.

Configure Experience Platform product profile

Now that you are an admin of the Luma Tutorial Platform product profile you can configure the services, permission, and roles you will need to complete the tutorial.

Add services

There are multiple services built on top of Adobe Experience Platform. Some of them are enabled via Platform's product profiles:
  1. Click Products on the top navigation
  2. Click Adobe Experience Platform on the left navigation
  3. Click on the Luma Tutorial Platform profile in the list
  4. Click the Settings link
  5. Click Services on the left
  6. Enable Query Service (you may see other options here depending on your product license)
  7. Click the Save button

Add permissions

Now you will add the individual permission items to the profile. From the product profile screen:
  1. Click the Permissions tab
  2. Under Sandboxes , add the Prod sandbox to the profile. It is necessary to have access to the Prod sandbox in order to create other sandboxes. Once we have added the tutorial sandbox in the next lesson, we will remove the Prod sandbox from the product profile.
  3. Add all of the permission items for the categories highlighted in the screenshot below, by opening a category and moving the items to the right column. Destinations is a capability of Real-time Customer Data Platform and permissions are not needed for this tutorial
  4. After adding all of the permission items, be sure to click the Save button
After saving, your screen should look like this:
The sandbox feature is currently in Beta. If you do not see permission categories Sandboxes or Sandbox Administration , please reach out to your Adobe representative for early access.

Add yourself as a user

At this point, if Luma Tutorial Platform was your only Experience Platform product profile, you still would not be able to log into Experience Platform's user interface. To do that you need to be a user in the product profile. Fortunately, since you are an admin of a product profile, you can add yourself as a user !
  1. Go to the Users tab
  2. Click the Add User button
  3. Complete the workflow to add yourself as a user to the product profile

Add yourself as a developer

In order to use the Platform API, you will need add yourself as a developer:
  1. Go to the Developers tab
  2. Click the Add Developer button
  3. Complete the workflow to add yourself as a developer to the product profile

Create a Launch product profile (requires a system administrator or product admin)

In this exercise you or a System Administrator at your company will create a product profile for Adobe Experience Platform Launch and add you as a product profile admin.
If you are a System Administrator facilitating the enablement of a colleague with this tutorial, consider adding them as a Product Administrator for Launch, in which case they would be able to complete these steps on their own and administrate other users of Launch in the future.
To create the product profile:
  1. In the Adobe Admin Console go to the Adobe Experience Platform Launch product
  2. Add a new profile and name it Luma Tutorial Launch (add the tutorial taker's name to the end, if multiple people from your company are taking this tutorial)
  3. Turn off the Properties > Auto-include setting
  4. Don't assign any properties or permissions at this point
  5. Add the tutorial participant as an admin of this profile
After completing these steps you should see that the Luma Tutorial Launch profile is set up with 1 admin.

Configure the Launch product profile

Now that you are an admin of the Luma Tutorial Launch product profile you can configure the permissions and roles you will need to complete the tutorial.

Add permissions

Now you will add the individual permission items to the profile. From the product profile screen:
  1. In the Adobe Admin Console , go to Products > Adobe Experience Platform Launch (you might need to SHIFT-Reload to see Adobe Experience Platform Launch show up after your permissions were just updated)
  2. Open the Luma Tutorial Launch profile
  3. Click on the Permissions tab
  4. Click to open the Properties row
  5. Make sure the Auto-Include toggle so that it is in the Off state so that you don't have access to any properties (we will add one later).
  6. Click the Save button
  7. Click to open the Property Rights row
  8. Click Add all to add all of the property rights
  9. Click the Save button
  10. Click to open the Company Rights row
  11. Add Manage Properties
  12. Click the Save button

Add yourself as a user

Now add yourself as a user to the Launch profile:
  1. Go to the Users tab
  2. Click the Add User button
  3. Complete the workflow to add yourself as a user to the product profile
You will not need to add yourself as a Developer for Launch.

Additional Resources

Now you have almost all the permissions required to complete the tutorial! There will be just two more tweaks that you will make inside the Adobe Admin Console, including one after you create a sandbox !