Adobe Advertising Cloud Update Access & Roles | OpsBlu Docs

Adobe Advertising Cloud Update Access & Roles

How to change Adobe Advertising Cloud roles and advertiser access while maintaining governance.

Update Access & Roles

Use this guide when an Adobe Advertising Cloud user's responsibilities change.

Quick recap: how Adobe Advertising Cloud scopes access

  • Product Profiles → Permissions: Users inherit permissions from assigned product profiles; adjust profiles rather than individual permissions.
  • Roles: System Administrator, Account Manager, Analyst, Creative. Administrators control system settings, billing, and user management.
  • Advertiser Scoping: Access can be limited to specific advertisers or expanded to org-wide visibility.
  • Integration Access: API credentials and cross-product integrations should be reviewed when roles change.

When to Adjust Roles

  • Account Manager moves to reporting-only role (switch to Analyst profile).
  • Analyst needs campaign management capabilities (add Account Manager profile).
  • User needs temporary access to additional advertisers for specific projects.
  • Contractor transitions from creative management to full campaign management.
  • Agency partner needs elevated permissions for campaign launch period.

Update Workflow

  1. Log in to Adobe Admin Console at adminconsole.adobe.com.
  2. Navigate to Users and search for the user to modify.
  3. Click on the user's name to open their profile.
  4. In the Products section, manage product profile assignments:
    • Add Profile: Click + to assign additional Adobe Advertising Cloud product profiles.
    • Remove Profile: Click X to remove product profiles and associated permissions.
  5. Adjust Advertiser Access:
    • Click Edit next to advertiser assignments.
    • Add or remove specific advertisers from user's access list.
    • Toggle org-wide access if appropriate for new role.
  6. Review Admin Roles and adjust if system-level permissions are changing.
  7. Click Save to apply changes.

Common Role Transitions

Account Manager to Analyst (Downgrade)

  1. Remove "Advertising Cloud - Account Manager" product profile.
  2. Add "Advertising Cloud - Analyst" product profile.
  3. User retains reporting access but loses campaign editing capabilities.
  4. Review and revoke any API credentials tied to campaign management.

Analyst to Account Manager (Upgrade)

  1. Keep "Advertising Cloud - Analyst" product profile.
  2. Add "Advertising Cloud - Account Manager" product profile.
  3. User gains campaign creation and optimization access while retaining analytics capabilities.
  4. Provision API credentials if user needs programmatic campaign management.

Expanding Advertiser Access

  1. Edit user's advertiser assignments in Admin Console.
  2. Add specific advertisers without changing product profile.
  3. User gains same level of access to additional advertiser accounts.
  4. Document business justification and review date for expanded access.

Temporary Access Elevation

  1. Add elevated product profile with expiration note in access log.
  2. Set calendar reminder to review and remove elevated access after project completion.
  3. Monitor user activity during elevated access period.
  4. Remove elevated profile on schedule and document completion.

Guardrails

  • Limit System Administrator role to senior team members who manage platform configuration and billing.
  • Use advertiser-level access instead of org-wide access whenever possible for least-privilege principle.
  • Review API credentials and integration permissions after every role change to prevent unauthorized access.
  • Document the reason for change, approver name, and scheduled review date in your access tracking system.
  • For significant privilege increases, require manager approval before implementing changes.

Post-Update Validation

  • Confirm new product profiles appear correctly in user's Admin Console profile.
  • Test user login to Adobe Advertising Cloud UI to verify permission changes took effect.
  • Verify user can access newly granted advertisers and campaigns.
  • Confirm user cannot access removed advertisers or perform restricted actions.
  • Test reporting access to ensure appropriate data visibility.
  • Check API access if credentials or integrations were modified.

Integration Considerations

When updating roles, consider impact on:

  • Adobe Analytics: Ensure Analytics permissions align with Advertising Cloud role changes.
  • Adobe Audience Manager: Verify user can still access required audience segments for campaign targeting.
  • Adobe Experience Platform: Check that Real-Time CDP and journey orchestration access remains appropriate.
  • API Integrations: Update or revoke OAuth/JWT credentials if access scope changed.
  • Third-party Tools: Review connected marketing automation or BI tools that use user's credentials.