module · Identity & SSO

Adobe

Adobe Admin Console control plane via the User Management API (UMAPI) — users, user groups, group membership, identity types, and full snapshot/diff/apply round-trip for the resources most worth versioning.

Namespace: weave adobe Env: ADOBE_ORG_ID

Commands

State kinds

Identity & SSO

Setup

Configure credentials via environment variables. We recommend sourcing them through 1Password or your secrets manager rather than committing them to the shell rc.

Variable	Description	Status
ADOBE_ORG_ID	Required for authentication.	required
ADOBE_CLIENT_ID	Required for authentication.	required
ADOBE_CLIENT_SECRET	Required for authentication.	required

Sanity-check the wiring:

weave secrets check
weave adobe --help
weave doctor   # reports ADOBE_ORG_ID status

Capabilities

What this module can do, by entity and verb. ✓ means a working CLI surface; · means not (yet) wired.

Entity	find	list	show	do	snapshot	diff	apply
group	✓	✓	·	✓	✓	✓	✓
group-members	·	·	✓	·	✓	✓	✓
user	✓	✓	✓	✓	✓	✓	✓
user-groups	·	·	✓	·	·	·	·

Commands

Every registered CLI command, grouped by verb. Each example uses placeholder arguments — substitute real values for your environment.

find (2)

find group

read

Find a user group by exact name.

weave adobe find group <name>

find user

read

Find a user by email (or username for federated IDs).

weave adobe find user <identifier>

list (2)

list groups

read

List every user group in the org (paginated).

weave adobe list groups <arg>

list users

read

List every user in the org (paginated).

weave adobe list users <arg>

show (3)

show group_members

read

Users in a group.

weave adobe show group_members <name>

show user

read

Full user record (alias for find user).

weave adobe show user <identifier>

show user_groups

read

Groups a user belongs to.

weave adobe show user_groups <identifier>

do (8)

do add-user-to-group

write

Add a user to one or more user groups.

weave adobe do add-user-to-group <email>

do create-group

write

Create a user group.

weave adobe do create-group <name>

do create-user

write

Create a new user (Federated / Enterprise / Adobe ID).

weave adobe do create-user <email>

do delete-group

write

Delete a user group (membership is unassigned, users are kept).

weave adobe do delete-group <name>

do remove-user

write

Remove a user from the org (does not delete the Adobe ID).

weave adobe do remove-user <email>

do remove-user-from-group

write

Remove a user from one or more user groups.

weave adobe do remove-user-from-group <email>

do update-group

write

Update a user group's description.

weave adobe do update-group <name>

do update-user

write

Update first/last/country on an existing user.

weave adobe do update-user <email>

snapshot / diff / apply are generated automatically from the State Kinds declared on this module — see the State kinds section below for per-kind details. Workflow: snapshot → edit YAML → diff → apply --yes (or confirm interactively; apply --dry-run previews the same diff).

State kinds

Resources this module can snapshot and diff; apply where the kind supports live writes (see Round-trip per kind). Always run diff before apply; use --yes in automation after review. Files live under .weave-state/adobe/.

users

snapshot diff apply

Every user in the Adobe org (email, identity type, profile).

Scope: —
Round-trip: Full round-trip — snapshot, diff, apply.

State file skeleton

module: adobe
kind: users
items:
  - # <fields specific to this kind — see snapshot output>

groups

snapshot diff apply

Every user group in the Adobe org (name + description).

Scope: —
Round-trip: Full round-trip — snapshot, diff, apply.

State file skeleton

module: adobe
kind: groups
items:
  - # <fields specific to this kind — see snapshot output>

group-members

snapshot diff apply

Member email list for one user group.

Scope: group
Round-trip: Full round-trip — snapshot, diff, apply.

State file skeleton

module: adobe
kind: group-members
group: <value>
items:
  - # <fields specific to this kind — see snapshot output>

Workflows

Worked examples coming soon — in the meantime, run weave adobe --help to discover what's available.

Troubleshooting & source

Missing credentials

Run weave doctor — it reports which env vars (including ADOBE_ORG_ID) are set and which are blank.

Unexpected behaviour from a state apply

Re-run weave adobe diff <kind> to confirm the controller's current state, then re-snapshot before the next apply. The driver always re-snapshots before diffing.

Open the source

The module lives at https://github.com/andy-broyles/weavewhatever/tree/main/src/weave/modules/adobe. File a bug or feature request at https://github.com/andy-broyles/weavewhatever/issues.