nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

External access to Feature Service in a Federated Environment?

tigerwoulds

We are running a Federated 10.7.1 environment. We're using Windows Active Directory as our Identity Store. One of our clients will need access to edit a feature service. The feature service is referencing data stored in a SQL Server SDE. Right now, the only way I'm seeing to allow this is to create an external AD account, import that account in Portal and give it a Creator user type. Is there any way to give an external person access to edit a feature service without A) Creating an external AD account and Using up one of our Portal user licenses?

Also, it would be ideal if that person couldn't actually login to our Portal if they came across it. Are there any other options or workflows for configuring limited external access to a service in a federated environment?

Thanks!

Najděte více příspěvků označených jako

Accepted answers

DerekLaw

Hi Tiger,

> Is there any way to give an external person access to edit a feature service without A) Creating an external AD account and Using up one of our Portal user licenses?

Answer is "no" to both as far as I know. Sorry. Since you've configured your ArcGIS Enterprise identity store to your Windows Active Directory (AD), anyone that you want to become a member of your Portal must also be a registered user in your Windows AD, and this means they need to be in a Portal editor role.

> Also, it would be ideal if that person couldn't actually login to our Portal if they came across it.

This is not possible because it contradicts the security model as described in my response above.

Hope this helps,

All comments

tigerwoulds

Derek Law‌ Do you have any ideas here? Or know someone that might have a suggested workflow?

Thanks!

RachelSears

Is this client part of an organization that has their own Portal or ArcGIS Online organization? If so, you could set up a distributed collaboration between both Portals.

About distributed collaboration—Portal for ArcGIS (10.8) | Documentation for ArcGIS Enterprise

tigerwoulds

Unfortunately no, they will be using the feature service in a GeoCortex viewer.

DerekLaw

Hi Tiger,

> Is there any way to give an external person access to edit a feature service without A) Creating an external AD account and Using up one of our Portal user licenses?

> Also, it would be ideal if that person couldn't actually login to our Portal if they came across it.

This is not possible because it contradicts the security model as described in my response above.

Hope this helps,

tigerwoulds

Hi Rachel! We now have an instance where the client has their own instance of Portal set up. I posted a question about this but maybe you could answer? https://community.esri.com/thread/255767-is-distributed-collaboration-the-correct-workflow-for-external-access-to-services

Připojte se ke konverzaci

Přihlášení členové mohou přispívat, sledovat aktualizace a další. Jste tu noví? Zaregistrujte si bezplatný účet.

Rychlé odkazy

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.