Add User Access
Use this runbook to onboard people to Adobe Advertising Cloud through Adobe Admin Console.
How Adobe Advertising Cloud structures access
- Admin Console-based: Users are managed centrally through Adobe Admin Console across all Adobe Experience Cloud products.
- Product Profiles: Define permission sets for different roles (System Admin, Account Manager, Analyst, Creative).
- Advertiser Scoping: Access can be limited to specific advertisers or granted org-wide.
- Cross-product: Users may need access to Adobe Analytics, Audience Manager, or Experience Platform for full integration benefits.
Prerequisites
- System Administrator or Product Administrator rights in Adobe Admin Console.
- The user's email address and intended role: System Administrator, Account Manager, Analyst, or Creative.
- Advertiser accounts or campaigns the user should access.
- Determination of whether user needs API access for integrations or bulk management.
Invite Workflow
- Log in to Adobe Admin Console at adminconsole.adobe.com.
- Navigate to Products and select Adobe Advertising Cloud.
- Click New User or Add User.
- Enter the user's email address, first name, and last name.
- Assign appropriate Product Profiles:
- Advertising Cloud - System Administrator: Full system control, user management, billing access.
- Advertising Cloud - Account Manager: Campaign creation, optimization, reporting, audience management.
- Advertising Cloud - Analyst: Read-only campaign access, full reporting and analytics access.
- Advertising Cloud - Creative: Creative asset upload and management, limited campaign access.
- Configure Advertiser Access:
- Select specific advertisers the user should manage/view.
- Or grant org-wide access if user manages all advertisers.
- Optionally assign Admin Roles if user needs elevated console privileges.
- Click Save to send invitation email to user.
Post-Invite Follow-Up
- User receives email invitation to create or link their Adobe ID.
- Ask the user to accept invitation and log in within 7 days.
- Confirm they can access Adobe Advertising Cloud UI at advertising.adobe.com.
- Verify they see only the advertisers and campaigns intended for their role.
- If user needs API access, provision OAuth credentials or JWT credentials separately.
- Document the invitation details, product profiles assigned, and review date in your access log.
Additional Configuration
API Access Setup
If user needs programmatic access:
- Navigate to Adobe Developer Console (console.adobe.io).
- Create new Project and add Adobe Advertising API.
- Generate OAuth credentials or Service Account (JWT) credentials.
- Assign API credentials to user's service account.
- Test the credentials:
# Generate access token using OAuth Server-to-Server credentials
curl -X POST "https://ims-na1.adobelogin.com/ims/token/v3" \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "grant_type=client_credentials&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET&scope=openid,AdobeID,read_organizations,additional_info.projectedProductContext"
# Verify access to Advertising Cloud API
curl -X GET "https://advertising.adobe.io/advertisers" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "x-api-key: YOUR_CLIENT_ID"
- Document API credentials and usage in security log.
Cross-Solution Access
If user needs access to integrated Adobe products:
- Assign additional product profiles for Adobe Analytics, Adobe Audience Manager, or Adobe Experience Platform.
- Configure data sharing permissions between products.
- Enable appropriate Analytics report suites for advertising integration.
- Set up Audience Manager data sources and destinations for audience activation.
Validation Steps
- Confirm user appears in Admin Console → Users with correct product profile assignments.
- Test login to Adobe Advertising Cloud UI with user's credentials.
- Verify user can view and edit campaigns as expected based on role.
- Check that advertiser access limitations are enforced correctly.
- Test reporting access to ensure user can view appropriate data.
- If API access was granted, test API authentication and basic operations.