I've been reviewing potential usage of Esri's ArcGIS Online services in an application. In this application, I allow users to configure various map providers including Esri (if they are licensed). I have Esri users that would like to use ArcGIS Online's World Street Map for basemap imagery only and they are already have licenses to ArcGIS Server where they would show features from. The application allows configuring a url to a MapServer to then pull tiles for basemap imagery from so easy to do but this brings up a question of ensuring they are allowed to use ArcGIS Online and the application can pass along the appropriate authentication via token to the REST requests.
I'm very confused after trying to dig into how to properly ensure that their usage of basemap endpoints online doesn't violate terms of service based on this summary . They have the licenses but I'd assume I need to ensure that their information is passed alone to Esri on their requests to track how many requests are tied to them. I've found the documentation for registering an application and getting token to pass along with requests to ArcGIS Online and have proven it out in Postman. I successfully got an access token which I can then pass along to request to ArcGIS Online.
What's confusing me is it seems nothing matters with tile requests. I don't see any usage showing up on the Application under my account. I have tested with GeoCodeServer and found that it does track usage for those requests and I can simply use the Service Proxy feature for Geocoding (very cool feature).
So, my question is do I need to have the token passed along with MapServer tile requests? It doesn't seem to track usage (I've tested with 30+ requests to make sure I'm passed the noted 8 tiles). It looks implied by Terms of Use but doesn't seem to have any evidence of actual usage being tracked.
https://services.arcgisonline.com/arcgis/rest/services/World_Street_Map/MapServer/tile/2/1/0?token=<mytoken>
