Configure permissions

In this lesson, you will configure Adobe Experience Platform user permissions using Adobe’s Admin Console and the Permissions screen in the Platform interface.

Access control is a key privacy capability in Experience Platform and we recommend limiting permissions to the minimum required for people to perform their job functions. See the Access Control documentation for more information.

Data Architects and Data Engineers are power users of Adobe Experience Platform and you will need many permissions in order to complete this tutorial and later in your day-to-day work. Data Architects are likely be involved in the administration of other Platform users at their company such as marketers, analysts, and data scientists. As you complete this lesson, think about how you might use these features to manage other users at your company.

Data Architects often configure permissions for other users outside of this tutorial.

About the Admin Console

The Admin Console is the interface used to administer user access to all Adobe Experience Cloud products. For access to Platform, a user or must be added in the Admin Console and then all of their granular permission items are managed in the Permissions screen of Adobe Experience Platform.

Here is a quick summary of the roles that exist for Platform:

• Users of a product profile can complete tasks in Platform’s user interface according to the permissions assigned in the product profile.
• Developers can create API credentials and projects in the Adobe Developer Console, in order to begin using Experience Platform API
• Product Admins can add users and developers to the Adobe Experience Platform product in the Adobe Admin Console, as well as manage granular user access in the Permissions screen of the Platform interface.
• System Administrators can add product admins and administer essentially any permissions for all Adobe Experience Cloud products.

Add a User and Developer to the AEP-Default-All-Users product profile (requires a system administrator or product admin)

In this exercise, you or a System Administrator or Product Admin will add you as a User and Developer in the Adobe Experience Platform product of the Adobe Admin Console.

To add the tutorial participant as a User and Developer:

1. Log into the Adobe Admin Console

2. Select Products on the top navigation

3. Select Adobe Experience Platform
   

4. You may have several profiles in your Experience Platform instance already. Select the AEP-Default-All-Users profile
   

5. Go to the Users tab

6. Select the Add User button
   

7. Complete the workflow to add the tutorial participant as a user to the product profile

8. Go to the Developers tab

9. Select the Add Developer button
   

10. Complete the workflow to add the tutorial participant as a developer to the product profile

Add a Role in Adobe Experience Platform (requires a system administrator or product admin)

Granular permissions to Experience Platform are managed in the Permissions screen of the Platform interface. Only System and Product Admins have access to this screen, so if you do not have Admin privileges, you will need assistance from someone who does.

Permissions are managed in Roles. Create a Role for the tutorial:

1. Log into Adobe Experience Platform

2. Select Permissions in the left navigation which will take you to the Roles screen

3. Select Create role

   

4. Name the role Luma Tutorial Platform (add the tutorial participant’s name to the end, if multiple people from your company are taking this tutorial) and select Confirm

   

5. Add all of the permission items for the following resources using + and Add all:

   1. Data Modeling

   2. Data Management

   3. Profile Management

   4. Identity Management

   5. Sandbox Administration

   6. Query Service

   7. Data Collection

   8. Data Governance

   9. Dashboards

   10. Alerts

       

6. Under Data Ingestion, add the Manage Sources and View Sources permission items.

7. After adding all of the permission items, be sure to select the Save button
   

You will make a few small updates to this role after the Create a sandbox and Set up Developer Console and Postman lessons.

Create a Data Collection product profile (requires a system administrator or product admin)

In this exercise, you or a System Administrator at your company will create a product profile for Data Collection (formerly known as Adobe Experience Platform Launch) and add you as a product profile admin.

To create the product profile:

1. In the Adobe Admin Console go to the Adobe Experience Platform Data Collection product
2. Add a new profile named Luma Tutorial Data Collection (add the tutorial participant’s name to the end, if multiple people from your company are taking this tutorial)
3. Turn off the Properties > Auto-include setting
4. Don’t assign any properties or permissions at this point
5. Add the tutorial participant as an admin of this profile

After completing these steps, you should see that the Luma Tutorial Data Collection profile is set up with one admin.

Configure the Data Collection product profile

Now that you are an admin of the Luma Tutorial Data Collection product profile you can configure the permissions and roles you will need to complete the tutorial.

Add permissions

Now you will add the individual permission items to the profile:

1. In the Adobe Admin Console, go to Products > Data Collection
2. Open the Luma Tutorial Data Collection profile
3. Go to the Permissions tab
4. Open Platforms
5. Make sure that all of the available platforms are selected (you may see different options based on your license)
6. Save any changes
   
7. Open Properties
8. Make sure the Auto-Include toggle is Off so that you don’t have access to any properties (we will add one later)
9. Save any changes
   
10. Open Property Rights
11. Select Add all to add all of the property permissions
12. Save
    
13. Open Company Rights
14. Add Manage Properties
15. Select Save
    

Add yourself as a user

Now add yourself as a user to the Data Collection profile:

1. Go to the Users tab
2. Select the Add User button
   
3. Complete the workflow to add yourself as a user to the product profile

You do not need to add yourself as a Developer for Data Collection.

Now you have almost all the permissions required to complete the tutorial! There will be just two more tweaks that you will make inside the Adobe Admin Console, including one after you create a sandbox!