Managing groups and users managing-groups-and-users
About security groups about-security-groups
Security groups are sets of users that share the same roles and rights within your organization.
Users must always be linked to a security group. This will allow you to assign them specific roles and organizational units. To restrict a user’s access, do not add the user to the Campaign Standard Users group as this is linked to All organizational unit.
For more information on roles, the table in the following page presents possible operations available according to a user’s role(s): Adobe Campaign Standard authorizations.
Default security groups are:
- Administrators
- Delivery supervisors
- Standard Users
- Workflow supervisors
Note that these built-in security groups are read-only and cannot be modified. To create your own security group with a set of specific roles, refer to the section below.
Creating a security group and assigning users creating-a-security-group-and-assigning-users
You can create your own security groups if the out-of-the-box groups are not enough to manage your users. They can be managed by Administrators that have access to both Adobe Campaign administration menus and the Admin Console. For more information on the Admin Console, refer to this documentation.
Here, we first need to assign the two out-of-the-box groups Standard user and Administrator to our users. These security groups will restrict some functionalities of Adobe Campaign: the Standard User has basics access to Adobe Campaign whereas the Administrator can access the administration menus for example.
Note that any changes made to security groups on the admin console will be synchronized as soon as users log into Adobe Campaign.
Then, we want to create a set of security groups Geometrixx and Geometrixx Clothes that will restrict some access depending on the organizational units of our Standard user and Administrator.
You first need to assign one of the out-of-the-box security group to your users:
-
In the Admin Console, select your instance then the Users tab.
-
Click the Add user button and enter your user’s email address.
-
In the Assign Products tab, select your instance then the Administrators out-of-the-box security group from the drop-down list. This will allow the user to have access to the administration menus and to create the next security groups.
-
Click Save and follow the same procedures to assign the Standard Users out-of-the-box security group to your new user.
Once your two users are attached to the Administrators and Standard users out-of-the-box security groups which assign roles to our users, the Administrator user can now create the two security groups Geometrixx and Geometrixx Clothes that will assign organizational units to our users in addition to the out-of-the-box security groups.
-
In the Admin Console, select your instance then the Products tab.
-
Click the New Profile button to create the Geometrixx security group.
-
Type the Profile name by following this exact syntax: Campaign Standard- instance name - ID of the security group and click Done.
The ID chosen will then be used while creating the security group in Adobe Campaign.
note note NOTE If the above syntax doesn’t seem to work with an older instance, it needs to be replaced by Campaign - instance name - ID of the security group. 
-
Then, follow the same procedures to create the Geometrixx Clothes security group.
-
Assign your security group to your user by selecting the Users tab.
-
Click your previously created user then the
Select Edit products assigned directly to start assigning new security group to your user.
-
In the Assign Products tab, select your instance then your previously created security groups Geometrixx from the drop-down list to assign it to your Administrator user.
Click Save.
If a user is in several groups:
- The roles of the different groups are cumulated. Here, users are in two different groups: one that will act on roles the other on units.
- It is the unit that is the highest in the hierarchy that will be used (see example in the Organizational units section).
- The user will no longer be able to connect if units have the same equivalent level and are in parallel branches in the hierarchy.
-
Follow the same procedures to assign the Geometrixx Clothes security group to your Standard user.
The newly created security groups are now created in the Admin Console. For them to be completely synced, you also need to create them in Adobe Campaign.
The Administrator user has to create the set of security groups that are used to assign organizational units: Geometrixx and Geometrixx Clothes. To learn how to create organizational units, see Creating and managing units .
-
Click the Adobe logo, in the top-left corner, then select Administration > Users & Security > Security groups.
-
Create your new security group and specify its Label and ID.
The ID needs to be the same as the one chosen in the Admin Console.
-
In the User access field, assign organizational unit. Here, the Geometrixx security group is assigned the All organizational unit.
note note NOTE If you are assigning an out-of-the-box security group to your users, you will need to reset the organizational unit. 
-
You can also assign roles to your security group. In our case, this step is not needed since the out-of-the-box security groups Administrators and Standard users are used to assign roles.
-
Follow the same procedures to create the last security Geometrixx Clothes and assign the Geometrixx Clothes organizational unit.
Your users are now assigned to a security group and can connect to Adobe Campaign.