Skip navigation
All Places > Education > Blog > Author: geri_miller-esristaff
1 2 3 Previous Next


35 Posts authored by: geri_miller-esristaff Employee

The updated Education Institution Agreement enables more students, faculty and staff to leverage ArcGIS technology, such that any ArcGIS product can be accessed on any device and in any location.


ArcGIS has grown beyond the confines of a single desktop GIS application, and ought to be managed as an institution-wide system available to everyone, similar to a learning management system (LMS) or cloud storage. More importantly, it must be managed at scale to take full advantage of the Institution Agreement benefits - maximizing access and minimizing administration time.   


To successfully deploy and manage ArcGIS in a sustainable and secure manner, please follow the below recommendations. These recommendations are designed to help you take full advantage of the Institution Agreement benefits, but they also apply to Site Licenses and K-12 Schools licenses.


  • Single ArcGIS Online organization – use a single ArcGIS Online organization for the entire institution to avoid impeding collaboration and minimize management workload.
  • Enable enterprise logins (Single Sign On, SSO) – leverage your institution’s identity provider to eliminate manual management of users and to prevent unauthorized access when student graduates or faculty/staff leave. Make sure to enable “Automatically” join for new users.
  • Configure New Member Defaultsauto-provision new users with everything they will need, which eliminates manual administration:
    • User Type (GIS Professional)
    • Role (Publisher) – empower users to do most tasks
    • Add-on licenses – such as Business Analyst, Community Analyst, Insights, ArcGIS Pro Extensions, GeoPlanner
    • Credit Quota – set it high enough that most users can get their work done, there is ample amount of credits available with your new Institution Agreement
    • Enable Esri Access – enable users to help themselves by providing access to Esri Training (e-Learning), GeoNet.
  • Software distribution – provide executables and provisioning files via your institutional file share system (Box, OneDrive, GoogleDrive, etc.). The same provisioning file can be used by everyone in your organization. ArcGIS can be accessed on any device.
  • ArcGIS Pro licensing:
    • The new GIS Professional Advanced User Type provides ArcGIS Pro licensing. ArcGIS Pro Extensions still need to be set in New Member Defaults as an Add-on license. Bottom line, ArcGIS Pro licensing is provided via named user in ArcGIS Online.
    • We discourage single use or concurrent use licensing – why maintain a license manager? Single Use licensing is recommended for offline use.
    • Disable “offline” licensing for ArcGIS Pro, as it often results in inquiries to recover the license.
  • Monitor Usage – demonstrate to stakeholders the breadth and depth of GIS on campus. The ArcGIS Online Usage Reports (Organization>Status) are a start and provide easy access to total usage data. Further analysis and efforts are needed to provide information for ongoing, repeat usage, as well as daily reporting.
  • Inactive users and stale content – if you are in the early stages of deploying ArcGIS to your entire institution, the recommendation is that you DO NOT delete users and content, as deleting users and content takes time and effort, it breaks the audit trail of ownership, and may break dependencies that others may have on that content. Deleting content cannot be recovered! Over time, you can work on best practices for your institution on how to manage inactive users and stale content.

Fellow Educators:


ArcGIS Online User Types have been in use for some time now as a way of providing apps and privileges to ArcGIS users. The Creator User Type has been available for Education program licenses.  


With recent updates to the Education Institution Agreements, the GIS Professional Advanced Use Type was added as the default option, versus Creator. GIS Professional Advanced User type differs from the Creator User type in the fact that it provides ArcGIS Pro Advanced licensing.


Everyone who has migrated to the new Institution Agreement (and has the GIS Professional Advanced user type as an option):


  •        Please switch all ArcGIS Online users to GIS Professional Advanced User Type. Instructions are listed here, and further info is below.
  •        If you do not assign GIS Professional Advanced User Type licenses, you will likely get a message “The number of user types and licenses assigned exceeds the number available”. The reason for this message is that users are now all GIS professional User Type licenses instead of Creator, while you may have Creator User Type licenses assigned.  


Please ensure that you utilize the New Member Defaults to auto-provision licensing for new users, preferably with Enterprise Logins (SSO). Note that the GIS Professional User type does NOT include all ArcGIS Pro extensions. When you set your add-on licensing on New Member Defaults, please note that you will have to add the extensions (and not ArcGIS Pro, since it is now part of the user type). Extensions count as one of the 5 add-on apps.


Note: If you have any ArcGIS Pro licenses who have been taken for "offline use", they will have to be recovered prior to making the switch from Creator to GIS Professional User type (for those specific users with offline licenses). All other users can be converted. We generally encourage administrators to "disable" taking ArcGIS Pro offline: Organization>Licenses>"Prevent Members from Taking ArcGIS Pro Offline".


How to Change User types – documentation here:


  1.       Login as an Administrator – Organization>Members tab.
  2.       On the left, filter by User Type – Creator.
  3.       Ensure that you are showing 100 members per page (maximum default currently), bottom right.
  4.       Check the box to in the upper Left to select all Members.
  5.       In the Upper Right, Manage User Types.
  6.       Select GIS Professional Advanced and Save.


Changing User Types can be done in an efficient manner via an ArcGIS API for Python script, such as:


from arcgis.gis import GIS


# Update these values for your ArcGIS Online organization orgURL = ""

orgUser = "an_admin_user"

orgPwd = "admin_password"


gis = GIS(orgURL,username=orgUser,password=orgPwd)


# Enumerate and iterate over all users

users = for user in users:

     # Change user type for each user

     print ("Changing user type for " + user.username +" to GIS




Further feedback is welcome!



Some of you have asked - there are two components/access points for QuickCapture – it is very similar to how Survey123 is accessed/licensed.


  1. Mobile app – download from Apple or Google Play (Note, as of today, June 27th, 2019, the QuickCapture mobile app has not been indexed yet by Apple or Google play, and it will be in 24-48 hours).  You can download  it directly on iOS from:
  2. QuickCapture designer (web tool) - . You can go directly to this URL. It will be part of the AppLauncher in September (for the time being, as an Administrator, you can manually add it to AppLauncher).


Educational institutions currently get Creator user type, which includes the Field Apps bundle that QuickCapture is part of, along with Collector, Survey123 and Workforce. No additional license assignment is needed.

For more info and tutorials:


 AppLauncher (QuickCapture Designer web tool will be part of it in September)


Field Apps Bundle (bottom), available with Creator user type (no additional license assignment needed)


Fellow Educators:


We are excited to share an update about the upcoming release of ArcGIS Online, which was heavily influenced by the Education community (you) – new functionality is added to make it easier to assign licenses and ease access to ArcGIS technology across campus. In addition, we will see improved member search and filter options – two other big asks from Education users.


In the June release of ArcGIS Online we will introduce a new Organizational setting: New Member Defaults. This setting grants Administrators the long-sought ability to configure default Add-on License options, alongside the previous options for default User Type, Role, Credit quota, Groups, and Esri Access.  The New Member Defaults are applied when creating accounts for any new user who is added/invited to the organization.


When combined with enterprise logins and its "Automatically" join option, the result is a fully automated process -- often referred to as auto-provisioning -- for providing access to ArcGIS to your entire campus community. (Some campuses achieved this in the past by implementing automated scripts that granted licensing entitlements when new users were detected in the system. This update eliminates the need for such scripts.)


To easily geo-enable your campus community, please consider taking the following steps:


  1. Enable enterprise logins, commonly known as SSO – integrate with existing business systems and do not create arcgis-only accounts (unless when working with outside affiliates).
  2. Enable "Automatically" join for enterprise logins (also known as auto-provisioning), so that new users are automatically granted access to ArcGIS.
  3. Configure the "New Member Defaults" so that people have access to everything in ArcGIS they might need to do their job:
    1. Leave the default user type set to "Creator". (FYI, the default user type will soon become GIS Professional Advanced for those with institutional agreements.)
    2. Set the role to "Publisher" – empower everyone with the abilities to do the work they need to do
    3. Configure default Add-on Licenses (ArcGIS Pro, Insights, Business Analyst, Community Analyst, GeoPlanner, etc.)
    4. Set a Credit Quota (1000, 2000, 5000, etc.) whatever fits your institution -- enable your community to do their work, yet protect them from accidental mistakes
    5. Enable Esri Access for everyone – allow them to utilize Esri Academy (E-Learning/Esri Training), GeoNet, etc.
  4. Encourage students, faculty, staff to leverage all free options for self-learning, such as Learn ArcGIS, Esri Academy, documentation, etc.


In addition, you will also see improved filter and member search options – enhancements influenced by education community as well - which will make administration easier.


For those of you joining us at Education Summit @ Esri UC, we’ll have this, and more, in some of our workshop offerings.


New Member Defaults:


New Filters:


Improved Search (consolidated) – Full name is no longer the default (no dropdown):

We wanted to ensure that everyone saw the below, and communicated it to your IT collaborators, as it will impact anyone using ArcMap versions prior to 10.7, and ArcGIS Pro versions prior to 1.3, when making connections to ArcGIS Online.  ArcGIS Enterprise, some client apps and custom third-party applications built on ArcGIS Runtime, depending on versions, may get affected also.


Though unfortunately this important security update does not comply with our academic calendars, action must be taken to ensure smooth transition… please visit the main TLS page for further details and next steps.


Thank you and feel free to post any questions on GeoNet – this is a page dedicated to this update.


  • Q. I have ArcGIS Pro 2.3, am I ready to go for April 16?
  • A. Yes.


  • Q. I have ArcGIS Pro 1.2 and earlier, am I ready to go for April 16?
  • A. No, action must be taken.


  • Q. I have ArcGIS Map 10.7, am I ready to go for April 16?
  • A. Yes.


  • Q. I have ArcGIS Map 10.6.1 and earlier, am I ready to go for April 16?
  • A. No, action must be taken.
  • A2. Perhaps an opportunity to update workflows to ArcGIS Pro.


  • Q. I have ArcGIS Enterprise version 10.6, am I ready to go for April 16?
  • A. It depends, likely action must be taken. Version of Portal for ArcGIS higher than 10.4.1 are unaffected. Versions of ArcGIS Server are dependent on underlining OS.


From: Esri <>
Subject: Reminder! Immediate Action Required — ArcGIS Security Update


On April 16, 2019, we are making an important configuration change to ArcGIS for TLS support.



View email in web browser.

Important Update for ArcGIS and TLS

Esri is committed to providing strong security for the ArcGIS platform by using the latest industry standards and best practices for security protocols. To meet these requirements, starting April 16, 2019, we are updating ArcGIS Online to enforce the use of TLS (Transport Layer Security) version 1.2 only. This date has been adjusted due to the partial shutdown of the US Federal Government and customer feedback.

This update is likely to affect most ArcGIS software and customer solutions. If you have not updated and validated your system's support for TLS v1.2 only, you may lose your ability to connect to ArcGIS Online.

More details about Esri's support for TLS, including patches and instructions for updating software, can be found by visiting

Who Is Affected?
Users of most ArcGIS software or custom solutions using Esri technology may be affected by this planned update to TLS protocol v1.2.

What Do I Need to Do?
Go to the
Esri TLS Support page for information, patches, and instructions for updating software for TLS v1.2. Patches for all versions of ArcGIS Desktop back to 10.2.1 are now available.

How Do I Validate My Systems Beforehand?
Esri is providing a validation web service that can be used to quickly verify that ArcGIS Desktop will work when TLS v1.2 only is enforced. Esri is also providing validation services for customers utilizing third-party apps and custom components including map services, geocoding services, and basemap services. Information about these validation services is available on the support site link above.

If this email is not applicable to you, please forward it to the one who manages your ArcGIS software or custom solutions using Esri technology.

Read More

You received this because of the impact of this announcement on your organization.

Update your subscription preferences. | Privacy | Contact Us

Copyright © 2019 Esri. All rights reserved.

Esri, 380 New York Street, Redlands, CA 92373, USA.

Hi Everyone,


If you use the ArcGIS API for Python to script provisioning of ArcGIS licensing, please read on…


As you may know, yesterday there was an update to ArcGIS Online. In conjunction, there was a release of the ArcGIS API for Python, version 1.5.2, which included better support for the new user types.


  1. We recommend updating to version 1.5.2 of the Python API, which is now available on the Esri conda channel. Note, the developer website will NOT go live until Monday. Please take a look at the following blog for more information.


  1. Please note that the name of the AppStudio entitlement has changed – it used to be “AppStudio for ArcGIS Standard”. Now it is “AppStudio for ArcGIS”. The key, “appstudiostd” stays the same. Please update your scripts accordingly, if you are currently provisioning AppStudio for ArcGIS Standard. Side note, this is to reflect a change of licensing for AppStudio – moving forward, and once migrated to the new institution agreement/site license, AppStudio Basic will be available to anyone via ArcGIS Online, while AppStudio Standard will be licensed through the ArcGIS Developer Subscription only. Further information can be found here.


Thanks to University of Michigan, University of Minnesota and Virginia Tech for testing early and confirming the above.


Let us know if you have any questions.

Simply sharing, AWS/Azure/GCP resources for research and teaching use - web meeting/presentations for instructional and research use, along with discussed resources.  



Please let us know if we can be of further help.  

Dear Colleagues:


You have likely seen information about the new User Types coming out in the December 4th release of ArcGIS Online. Some of you have asked how these new User Types will affect Education program offerings, therefore we wanted to provide an update.


Overall, not much will change immediately for those of us with Education program licenses, such as Site/Institution licenses, Lab Kit/Academic Department licenses, or Schools bundles.  However, these changes lay the groundwork for streamlining ArcGIS administration even further and we will see additional changes in the coming months.


What is changing in this December 4th release:


  • Level 1 named users will automatically be converted to Viewer User type.
  • Level 2 named users will automatically be converted to a Creator User type.
  • All capabilities of each user type remain the same.
  • Roles remain the same (Administrator, Publisher, User, Custom Roles, etc.).
  • An updated look/interface and updated Licenses and Members pages and workflows.  
  • For existing users, any already assigned licenses/entitlements will remain assigned.
  • For new users, licenses/entitlements of ArcGIS Pro and other apps (Business Analyst, Insights, etc.) will need to be assigned, as before.


Additional information on changes in this December 4th release can be found here.


What does the introduction of the new User Types mean over the coming months (i.e. future releases):


  • We anticipate additional changes in the March 2019 ArcGIS Online release which will provide the ability to configure additional app assignments in enterprise login settings.
  • We will continue to work towards automated provisioning of all apps included in Education program offerings so you can easily and efficiently provide your users with access to the full capabilities of ArcGIS.


In summary, this December release introduces some exciting new changes, and will see additional changes over the coming months. In the meantime, we continue to recommend enabling enterprise logins, if you haven’t yet, and following these best practices for administering ArcGIS.


Please let us know if you have any questions, feel free to post here.

Simply sharing 3D/Lidar resources - huge thanks to Geoff Taylor (Esri) and Christine Wacta (SCAD) for their inspirational presentations in a webinar focused on 3D and Lidar workflows and tools, and for their willingness to share content. Below are the resources we discussed:


We often get asked about the differences between My Esri and ArcGIS Online accounts in educational settings, and how the two are related. We wanted to document a few items to keep in mind - indeed, they are two different accounts, which could bring confusion.


My Esri - portal to manage your customer account information:

  •      Update contact and account information.
  •      Review order history and maintenance status.
  •      Access license information and generate provisioning files for users.
  •      Access software downloads.
  •      Create technical support cases.
  •      Manage conference registrations.
  •      Add users with customizable access levels, including adding users for Esri Training and GeoNet access (though not necessarily recommended to add students/faculty/staff for purpose of providing access to Esri Training, GeoNet, etc., more below).
  •      Your My Esri account is your identity to My Esri – this is your customer record.


ArcGIS (ArcGIS Online or ArcGIS Enterprise) named user account:

  •      Your ArcGIS account is your identity in the organization/portal, it is how you get access to ArcGIS Online and are provided various privileges and capabilities to work with ArcGIS, depending on your role (User, Publisher, Administrator, etc.).  
  •      If you enable Esri Access for an ArcGIS Online account, users can access Esri Training and GeoNet with their ArcGIS Online credentials. Hopefully those are enterprise accounts – i.e. your organization in Educational setting has enterprise logins enabled (SSO).
  •      If you are an Administrator, this ArcGIS account is used to grant entitlements for SAAS products (apps, ArcGIS Pro, etc.), also to enable Esri Access, and a number of other functions.
  •      This account stays with your institution, however, you may transfer any Training History to a personal (or other) account by reaching out to Esri Customer Service.


A few additional facts:

  •      If you already have Esri account for training, enabling Esri Access on ArcGIS Online account is not going to link that ArcGIS Online account to any existing Esri account (and to the training history, support, event registration, etc. associated with it)
  •      An individual could have Esri account tied to a personal email address, so that they can retain their training history after they leave the institution.
  •      If you are a student or faculty/staff, you can be linked to your institution’s My Esri (customer record). Note that we don’t necessarily recommend this, unless this individual will be helping with management of downloads files, generation of provisioning files, calling Technical Support, and other similar functions.
  •      If you have purchased a license from Esri (Personal Use, Student Use), you will have your own Esri organization.
  •      Therefore, you may have multiple Esri accounts.
  •      A single email address may be tied to multiple ArcGIS Online accounts, but to only one Esri account (Exception: ".edu" and "" emails may have multiple).
  •      When logging to Esri Training or GeoNet, one must use (a) an Esri Account, or (b) an ArcGIS Online account with Esri Access enabled.



  •      There are various approaches for management, but we typically don’t recommend adding students to the My Esri organization, as this would impose manual admin work to grant such access, and work for students to accept email invitations the correct way and with the correct account, and to keep track of which account is used for what. This may appear to be an acceptable option for managing a class or two, but not for empowering your whole institution to use ArcGIS.
  •      We do recommend enabling Esri Access via ArcGIS Online accounts – if an institution has implemented enterprise logins, this is an automated process for anyone joining the organization (no additional work for admin or students).
  •      Additional information for recommended way to share downloads/executables/provisioning files is here, so that it does not have to be done through My Esri for everyone in an institution.
  •      Any of the above options make it challenging to retain Training History (certifications from courses, etc.) – the solution for now, for whoever wishes to preserve their training history upon leaving the institution, is to reach out to Customer Service and request their training history be transferred from their institutional ArcGIS account to a public one.

Huge thanks to Ryan Danzey (Esri), Richard Tsung (USC),  Duffy Chisholm (UCR) and Hoori Ajami (UCR) for sharing their experiences in virtualizing ArcGIS Pro!!!


  • The recording and slides are located  here


Below are a couple of resources for what we discussed - be on the lookout for a blog and further resources coming up on AWS AppStream!



Please post any questions or further follow up here. 

Simply sharing, if you have not seen the following resources, covering a great variety of capabilities and topics with Esri platform.


  • YouTube - 50 Tech Workshops are publicly available to share with your faculty/staff/students
  • Slides - PDF versions of the PowerPoint slides from each workshop (Esri Events Proceedings page)


Along the same lines, the 2018 Esri Developer Summit offerings are here.

For those of you interested, and if you have not seen this already, this Story Maps and the Digital Humanities collection contains some inspirational examples of humanities/education/academic oriented story maps. 


It is a companion to Allen Carrol's recent blog post on this topic.



We often get asked “I’d like my students, staff or faculty to use ArcGIS Pro, what is the best way to distribute the download/executable to them”? This applies to any other Esri application that needs to be downloaded and installed, such CityEngine, ArcGIS Enterprise, ArcMap, etc. There are a few ways to accomplish this, and our recommendation is to use your institutional file share system.


This applies for distributing single use provisioning files, however, this depends on the application. The recommended way of licensing ArcGIS Pro is through a named user account in an ArcGIS Online organization, even in lab environments. If you are licensing ArcMap, since named user licensing is not available for ArcMap, please share the same single use license file with everyone (which times out in 1 year), via your institution's shared file system. Please avoid ordering 1-year individual EVA software codes for your students when licensing ArcMap. We are moving away from them. Sharing a single license file is a preferred method and it alleviates administrative hassles. 


  •      Use your institution’s file share system – this could be Box, Google Drive, shared drives, whatever method is typically used to distribute files. Advantages are:
    •      One location for accessing the executables that can be used by everyone in the organization (this makes it easy for ArcGIS administrators, instructors and students).
    •      It can be behind the same single-sign-on (SSO) as your ArcGIS Online organization, LMS or other business systems – makes it easy for students, staff and faculty to simply login with their known enterprise credentials and download.
    •      Potentially faster download speed.


  •      Use My Esri – this could be an involved process if one wants to provide Download access to many students, staff and faculty. We generally discourage it for the reasons below – and of course exceptions apply.
    •      This involves an invitation to My Esri initiated by the administrator.
    •      Depending on whether the My Esri account is already in the system, there may be additional interaction to Request Permission (for Downloads in this case).
    •      There are a couple of notification emails that would go out to students, staff, faculty who are being given those permissions, such as “your permissions request has been received”, or “your request has been approved” notifications.
    •      This can be burdensome for administrators (to have to manage the requests), for instructors (to have to instruct their students where to go to download), and for students (to have to navigate My Esri to get to downloads).
    •      From Administrator standpoint, this does not scale well for increased number of users.


  •      Use trial downloads – we discourage this method, as it has students creating additional accounts that can be confusing with any other My Esri or ArcGIS Online accounts they already have. In addition, the purpose of ArcGIS trials is not meant to be for student use, rather, for Esri customers to evaluate products for purchase. 

Feel free to share feedback.

We often get questions by academic users on how to teach with ArcGIS Enterprise, especially by those who have been teaching with a standalone ArcGIS Server. For anyone new to ArcGIS Enterprise - ArcGIS Server was renamed to ArcGIS Enterprise as of the 10.5 release, to reflects its functional capabilities and a modern Web GIS pattern. ArcGIS Enterprise is how we do Web GIS in an organization’s infrastructure.


We wanted to outline a couple of possibilities in terms of teaching and deployment in the classroom. They are simply scenarios, and we welcome any feedback if anyone has utilized any of these, or other, patterns. Choosing an option will depend on your purpose:


  •      If one wants to empower many instructors and students to participate in innovative educational opportunities, enabled by ArcGIS Enterprise advanced services and capabilities, the first listed option would probably be best. In this case, the instructors or students do not necessarily need to know everything about the underlying technology, they just need to take advantage of the capabilities, once it is setup for them.
  •      If one wants to teach administrative aspects of deploying a technology such as ArcGIS Enterprise, then the second and third options may work better.


Note that there are a number of System Requirements that we need to keep in mind as we teach with ArcGIS Enterprise, specifically the need for Domain Name Service (DNS), Fully Qualified Domain Name (FQDN) and SSL certificates – items that we didn’t necessarily have to think about with the older standalone ArcGIS Server pattern.


  •      ArcGIS Enterprise deployed for a course/program
    •      All students are Publishers in the portal
    •      Everyone leverages advanced services (geocode, image, geoprocessing, etc.)
    •      Everyone leverages advanced capabilities and server roles (GeoEvent/Real Time GIS, GeoAnalytics, Raster Analytics, Business Analyst)
    •      Everyone uses ArcGIS Pro to share to the portal
    •      Enterprise logins (SSO) can be used to alleviate manual student user creation


  •      ArcGIS Enterprise for a course (base ArcGIS Enterprise deployment managed by instructor, students having standalone ArcGIS Server machines, which they will federate with Portal for ArcGIS)
    •      Instructor has the base ArcGIS Enterprise deployment (Portal for ArcGIS, ArcGIS Server, ArcGIS Data Store, 2 ArcGIS Web Adaptors)
    •      If there are 20 students in a course, each of the 20 students will have their own ArcGIS Server machine – they will be Administrators on the Instructor portal and each student will federate his/her ArcGIS Server site to the Instructor portal (so 20 federated servers). They will do this as an exercise, i.e. practice some of the installation steps, but understand the importance of the portal in a modern Web GIS pattern. They will not get to setup the portal homepage and other settings.
    •      Everyone can leverage advanced services and capabilities.
    •      Everyone uses ArcGIS Pro to share to the portal.
    •      Note, this scenario with many federated servers has not been tested (a couple of universities are planning to implement it in Fall 2018) so please do test and share any results if this is your pattern of choice, especially if you have a lot of students in a course.


  •      Every student gets their own ArcGIS Enterprise deployment (students practice administration of ArcGIS Enterprise, including installation, portal setup (homepage, users, and various administrative duties)). We use this option in a "Web GIS" course at Johns Hopkins University, so I’ll take the liberty to document a few details.
    •      Students were given a scenario that they work for the City of X, and were tasked with deploying and administering a Web GIS in the city's infrastructure, to provide apps and capabilities to the city's constituents. They got to install ArcGIS Enterprise, setup the portal, add users, and wear an administrator hat. They really enjoyed it – it was empowering, after they’ve worked with a SaaS such as ArcGIS Online, to be able to do many things on premise themselves, including Real Time GIS!
    •      We leverage AWS as an infrastructure but this could be done on-premise or with other cloud platforms, such as Azure or Google Cloud (GCP). Every student gets a dedicated EC2 instance. We have AWS federated logins and SSO (which means no manual IAM user creation for students – access gets controlled through Active Directory (AD) groups and roles mapped to them). Therefore, students can just login to the AWS console using their student credentials, and they have privileges to start/stop/restart their own instances and no one else’s.
    •      Esri Cloud Formation, Esri ArcGIS Enterprise AMIs or ArcGIS Enterprise Builder can be used in this scenario.
    •      We favored the use of ArcGIS Enterprise Builder deployed by students on a preconfigured AMI we setup beforehand (starting with the standard AWS Windows Server 2016 instance, turning off Internet Explorer Enhanced Security Configuration, setting up Chrome as a default browser, installing Notepad ++, Installing ArcGIS Pro, copying the install executables on the AMI, and a few other tweaks)
    •      We used AWS Route 53 for DNS, our own domain hosted in AWS (such as, and record sets for each student. Let’s Encrypt wildcard cert was used by all students. We could have worked with Central IT to register all student instances with JHU DNS, but they recommended against Elastic IPs, required all internal traffic, which meant the students would have to VPN, which was not ideal for a fully online program, given that our students could be anywhere geographically. Hence, managing everything within AWS appeared to be an easier approach. However, there are many options in terms of networking and fulfilling the system requirements.
    •      At the end of class, we had a DevOps scenario, and students again got to configure a base deployment using Chef Solo (free Chef Client download), and Esri Chef cookbooks, specifically the ArcGIS Enterprise recipe – powerful way to observe Web GIS automation and deploy via a script.


Note that to deploy ArcGIS Enterprise for teaching, licensing will be needed for the ArcGIS Server component as well as the Portal for ArcGIS component. For the Portal for ArcGIS licensing, you will likely need to reach out to your Esri Account Manager and specify the number of named users you’d like to have in your portal. For the last described pattern (each student having their own ArcGIS Enterprise deployment), licensing for the Portal for ArcGIS component would need to be obtained for each student through the ArcGIS Developer Subscription, documented here. Students will get a portal with 5 named users.


If anyone has used the above scenarios, or others, please do share what worked, if any challenges were encountered.



Filter Blog

By date: By tag: