Share with "Everyone" question

jlborlick

I have a question about ArcGIS Portal. I'm going to preface this with I know that we are running Server 11.3x, our enterprise is federated, Portal is behind the firewall, we have a linux web adaptor and a server outside the firewall for the public. I haven't administered an enterprise database/server in, like, 20ish years, so my understanding of how all of this works is outdated and buried underneath many cobwebs. 

Currently, when I share to "Everyone" in Portal the only people that see what I'm sharing are the people on our intranet. Which is the way that I want it. The only things that are shared publicly are data that are published through ArcGIS Pro. 

Question 1. Should I have any concern that sharing to "everyone" could potentially share to the outside world? If so, what can I do to prevent it. (Other than managing every single person in my organization as viewers.)

Question 2. Is there a way to publish data from ArcGIS Pro to "Everyone" in my Portal, but not "Everyone" on the internet. Or should the COP be for people who want to put data on the Portal to add it as an item?

ryanuthoff

Oh, I think I understand. You essentially want anonymous access enabled on your Portal so everyone on your intranet can access Portal, even without an account. But you want to prevent people on the outside internet from being able to access it (even though it's already locked down behind your firewall) in the event it does become publicly accessible.

I think what I'm confused with is how your Portal is locked down to your intranet only, but I'm not sure how your hosted services are still publicly accessible. 

To answer your last question, adding an item in Portal will create a service in your hosted folder if you're creating a hosted feature service from it. For example, if you upload a FGDB and then create a hosted feature service from that FGDB, then it will create a service in your hosted folder. That workflow isn't much different than using Pro to publish a hosted service. At the end of the day, it gives you the same result. But if you upload data without creating a hosted feature service from it, then it won't be stored in the hosted folder.