> ## Documentation Index > Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt > Use this file to discover all available pages before exploring further. # Adobe Admin Console API > Create, update and remove users in your clients' Adobe organizations, assign and free Acrobat and Creative Cloud licences, report seats, and manage user groups and admin roles The common uses are staff onboarding and offboarding, and licence reports: after the agent creates a new hire's Microsoft 365 account, it creates their Adobe user and assigns their Acrobat licence; when someone leaves, it removes them and frees their licences; on a schedule, it reports assigned against available seats for each client. Automatically enabled when you configure Adobe Admin Console permissions in your agent workflow. Adobe is connected per client, so the agent calls the Adobe organization of the ticket's company, and Neo puts that organization's id into every request. ## What it does * Find a user by email, list the organization's users, and list the members of a user group or product profile * Create a user (Federated ID, Enterprise ID or an existing Adobe ID), change their name, and remove them from the organization * Assign and free licences by adding a user to, or removing them from, product profiles and user groups * Report each product profile's licence quota and members, and list members who have no active licence * Create, rename and delete user groups, and change which users and product profiles they hold * Grant and remove admin roles, such as support admin or a product profile's admin When Adobe refuses a command in a request, Neo reports it as an error that names the refused command and says the others ran, so the agent never reports a refused change as done and never sends a completed one twice. ## How the agent onboards a user The agent looks the person up first. It creates the user with the account type their colleagues have, then, in a second request, adds them to the product profile that holds the licence, such as Acrobat Pro. It then lists that profile's members with an active licence to confirm. When the profile has no free licence, Adobe lists the user as inactive, and the agent tells the technician. ## How the agent offboards a user The agent removes the user from the organization, which frees every licence they held and keeps their account. It deletes the account and its files only when the request says to delete it, because Adobe cannot restore a deleted account. ## Permission groups | Group | Access levels | Covers | | - | - | - | | Users | Disabled, Read Only, Read / Write | The organization's users with their groups and admin roles, and the members of each group, profile and admin role; create, change the name of, remove and delete users | | Product Access & Licences | Disabled, Read Only, Read / Write | Product profiles, products and licence quotas; adding and removing users and user groups on product profiles and user groups; removing any membership, admin roles included | | User Groups | Disabled, Read Only, Read / Write | User groups; create, rename and delete one | | Admin Roles | Disabled, Read Only, Read / Write | Granting an admin role, and changing a user's sign-in email or username. Who holds a role is part of the Users reads | A request changes one group's things. Adding a user to a group whose name starts with `_` (Adobe's names for admin roles) is an Admin Roles change, wherever it appears. Taking an admin role away grants nothing, so it needs only the group of the step that takes it: Product Access for removing a membership, Users for removing the user. The agent sends a user's creation and their licence in two requests. ## Access profiles | Profile | What runs on its own | What asks a technician | | - | - | - | | **Read Only** | Every read | No write is allowed | | **Helpdesk** | Every read | Creating, changing or removing a user, and assigning or freeing a licence; user groups and admin roles are read only | | **IT Admin** | Every read and write except granting admin roles | Granting an admin role, and changing a user's sign-in | | **Full Automation** | Every supported call | Nothing | This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.