ArcGIS Enterprise

Create more flexible administrative roles for your organization

Have you ever wanted more flexibility determining what an administrator can and cannot do in your organization? Perhaps you have administrators that you want to manage certain aspects of your organization without granting full administrative control. Maybe you have administrators with different responsibilities: some who manage the website and its members, while others focus on keeping your organization secure.

With the June release of ArcGIS Online and ArcGIS Enterprise 10.7.1, there is more flexibility for allowing users to manage the administration of your organization. You can create custom roles that include administrative privileges to manage organizational settings. This allows administrators to delegate a specific set of administrative tasks to users without giving them the full set of privileges in the default administrator role.

Use any combination of the following privileges in a custom administrator role to grant specific privileges:

Members assigned the default administrator role have full capabilities and privileges in the organization. Be mindful when assigning this powerful role, as it provides full access to the organization’s settings and may grant more privileges than your members need.

Organization settings view for default administrators
Organization settings page view for default administrators with all settings available

You can now create custom roles that allow access to the organization’s settings without granting full control. For example, a user with a custom role that includes only the Organization website privilege will have the ability to manage the organization’s website settings without the ability to perform other administrative tasks, such as managing security or utility services. When this user navigates to the Organization page, they will see the relevant settings to manage the look and feel of the website. They can modify settings such as the organization name, home page, gallery and other cosmetic elements, but do not have the privileges to update any security related settings.

Organization settings view for custom role with organization website administrative privilege
Organization settings page view for members with the "Organization website" privilege

You may have a designated team to manage the flow of content across several organizations using distributed collaboration. These members can be assigned the Collaborations privilege to create and manage collaborations, without any of the other administrative privileges granted in the default administrator role.

To leverage these new fine-grained administrative privileges, you must create a custom role in your organization settings page.

In ArcGIS Online, you will see this new capability in the Member Roles tab of the Organization page, under Administrative Privileges when creating or editing a custom role.

Administrative privileges available for custom roles in ArcGIS Online
Administrative privileges available for custom roles in ArcGIS Online

In ArcGIS Enterprise, the new settings are under Portal settings in the Administrative Privileges section of custom roles.

Administrative privileges available for custom roles in ArcGIS Enterprise 10.7.1
Administrative privileges available for custom roles in ArcGIS Enterprise 10.7.1

The privileges granted to the custom role will define which organizational settings the member assigned that role can view and modify. There are some capabilities that are still reserved for default administrators, such as the ability to promote or demote other members assigned the default administrator role.

The new fine-grained administrative privileges in the June 2019 update of ArcGIS Online and ArcGIS Enterprise 10.7.1 provide the flexibility to create custom roles that can better match the unique needs of your organization.

For more information on these new custom administrative privileges, see the ArcGIS Online help or ArcGIS Enterprise help.

About the authors

Katy is a product engineer on the ArcGIS Enterprise team. She has a background in GIS, remote sensing and environmental science, including experience as a hydraulic modelling and flood risk management consultant in the UK.

Marley is a Product Engineer on the ArcGIS Enterprise team.

Next Article

Browse feature layer attachments using Attachment Viewer

Read this article