Update Access & Roles
Use this guide when an Adobe Advertising Cloud user's responsibilities change.
Quick recap: how Adobe Advertising Cloud scopes access
- Product Profiles → Permissions: Users inherit permissions from assigned product profiles; adjust profiles rather than individual permissions.
- Roles: System Administrator, Account Manager, Analyst, Creative. Administrators control system settings, billing, and user management.
- Advertiser Scoping: Access can be limited to specific advertisers or expanded to org-wide visibility.
- Integration Access: API credentials and cross-product integrations should be reviewed when roles change.
When to Adjust Roles
- Account Manager moves to reporting-only role (switch to Analyst profile).
- Analyst needs campaign management capabilities (add Account Manager profile).
- User needs temporary access to additional advertisers for specific projects.
- Contractor transitions from creative management to full campaign management.
- Agency partner needs elevated permissions for campaign launch period.
Update Workflow
- Log in to Adobe Admin Console at adminconsole.adobe.com.
- Navigate to Users and search for the user to modify.
- Click on the user's name to open their profile.
- In the Products section, manage product profile assignments:
- Add Profile: Click + to assign additional Adobe Advertising Cloud product profiles.
- Remove Profile: Click X to remove product profiles and associated permissions.
- Adjust Advertiser Access:
- Click Edit next to advertiser assignments.
- Add or remove specific advertisers from user's access list.
- Toggle org-wide access if appropriate for new role.
- Review Admin Roles and adjust if system-level permissions are changing.
- Click Save to apply changes.
Common Role Transitions
Account Manager to Analyst (Downgrade)
- Remove "Advertising Cloud - Account Manager" product profile.
- Add "Advertising Cloud - Analyst" product profile.
- User retains reporting access but loses campaign editing capabilities.
- Review and revoke any API credentials tied to campaign management.
Analyst to Account Manager (Upgrade)
- Keep "Advertising Cloud - Analyst" product profile.
- Add "Advertising Cloud - Account Manager" product profile.
- User gains campaign creation and optimization access while retaining analytics capabilities.
- Provision API credentials if user needs programmatic campaign management.
Expanding Advertiser Access
- Edit user's advertiser assignments in Admin Console.
- Add specific advertisers without changing product profile.
- User gains same level of access to additional advertiser accounts.
- Document business justification and review date for expanded access.
Temporary Access Elevation
- Add elevated product profile with expiration note in access log.
- Set calendar reminder to review and remove elevated access after project completion.
- Monitor user activity during elevated access period.
- Remove elevated profile on schedule and document completion.
Guardrails
- Limit System Administrator role to senior team members who manage platform configuration and billing.
- Use advertiser-level access instead of org-wide access whenever possible for least-privilege principle.
- Review API credentials and integration permissions after every role change to prevent unauthorized access.
- Document the reason for change, approver name, and scheduled review date in your access tracking system.
- For significant privilege increases, require manager approval before implementing changes.
Post-Update Validation
- Confirm new product profiles appear correctly in user's Admin Console profile.
- Test user login to Adobe Advertising Cloud UI to verify permission changes took effect.
- Verify user can access newly granted advertisers and campaigns.
- Confirm user cannot access removed advertisers or perform restricted actions.
- Test reporting access to ensure appropriate data visibility.
- Check API access if credentials or integrations were modified.
Integration Considerations
When updating roles, consider impact on:
- Adobe Analytics: Ensure Analytics permissions align with Advertising Cloud role changes.
- Adobe Audience Manager: Verify user can still access required audience segments for campaign targeting.
- Adobe Experience Platform: Check that Real-Time CDP and journey orchestration access remains appropriate.
- API Integrations: Update or revoke OAuth/JWT credentials if access scope changed.
- Third-party Tools: Review connected marketing automation or BI tools that use user's credentials.