Adobe IMS product profiles adobe-ims-product-profiles

Transcript

Adobe IMS product profiles are the abstraction that provide IMS users access to experience cloud products. Their access in the Admin console via the Products tab. Select the Experience Cloud Product to manage on the left, and then select the Product Instance from the main list on the right. In this case, we selected the Adobe Experience Manager as a Cloud Service product on the left. Which shows us all of its product instances on the right along with the Cloud Manager product instance that manages all our AEM product instances. Don’t be worried if this list is very long. It contains the product instances which maps to the individual AEM service tiers or in other words, author and publish. For every AEM environment that is part of this product. So if our Adobe org only had one AEM program with all three environments, dev, stage and production, we’d have six product profiles total. One for the dev author, one for dev publish, one for stage author, one for stage publish, and one for production author and finally another for production publish, resulting in six entries total. As the number of AEM environments increase, this view can become difficult to navigate. So let’s jump over to Adobe Cloud Manager to see how we can make finding the relevant product instance and in turn the product profiles there in simpler. Over in Cloud Manager, we’ll click into the program that contains the environment we want to manage, locate that environment in this case, we’ll look at production and tap Manage Access. This takes us directly to the Adobe Admin console and drops us into the product instance corresponding to the selected environments AEM author service. Once in the product instance its product profiles are listed. When a new AEM environment is provisioned, two product profiles are automatically created; AEM users and AEM administrators. For an Adobe IMS user to gain access to the AEM service, they must be a member of one of these two product profiles. Members of the AEM users product profile can log into a AEM with read permissions. Allowing them to navigate AEM but not change content or configuration. As we’ll see later this is achieved by the automatic membership in AEM’s own contributors user group. Members with the AEM administrators product profile, on the other hand, can log into a AEM with administrative privileges, allowing them to make almost any change in AEM, including managing other users and groups. Product profile membership can be managed manually in the Admin console. So let’s go ahead and add my user to the AEM administrators product profile.

Users can also be assigned in bulk via CVS or via User Sync using Adobe’s User Sync tool or the seamless integration with supported user directories. When working with AEM, this should be the only product profiles you need. And as we’ll see later on Adobe IMS user groups can be used in conjunction with product profiles in AEM to assign more specific permissions for users in the AEM. Before we end, let’s quickly take a look at some of the other tabs in the product instance and product profile consoles to ensure they don’t confuse. First let’s jump up a level to the Product Instance.

And here we have three tabs, Product Profiles, which lists the product profiles, we just drilled into and discussed. The Users tab, which lists all the users that are part of any product profile for this product instance, and provides a quick view of who can access this AEM service. And lastly, the Admin stamp. This lists all the Adobe IMS users that could administrate this product instance. So they can add or remove users from their product profiles. Admins listed here are not going to be admins in AEM necessarily, unless they’ve been added as part of the AEM administrators product profile.

Let’s drop back down into our product profile which has similar tabs. User, simply lists and manages all the users that are part of this product profile. Admins, lists all administrators of this specific product profile. And again, these are not AEM administrators, but rather Adobe Admin console administrators that have been given a finer granularity of administrative rights specific to this product profile. So for example, you may want to have more people managing who can be a member of the AEM users product profile, but limit the number of people that can manage the more powerful AEM administrators product profile. The Developers tab manages Adobe IMS users that can create an associate Adobe I/O integrations with the product profile. But this is currently not used with AEM. And Integrations list any Adobe integrations set up for this product profile by the developers. Again, this is currently not used by AEM as AEM manages these integrations within AEM itself rather than via the Admin console.

So even though there appears to be a lot going on under products at the end of the day, you just need to make sure you’re managing the membership of the AEM user and AEM administrator product profiles for the corresponding AEM services. Note that for Experience Manager as a Cloud Service at this time, Adobe IMS groups cannot be directly assigned to product profiles to grant all users of the group access to that product profile. Instead users needs to be directly added to the appropriate product profile. -