Disabling Service Discovery for securing ArcGis Server works only for some cases.

Question

Is it possible to enable service discovery for specific users or specific roles.

I want to publish some of services externally so I want to disable service discovery as Esri recommends at security best practices.

But When I disable it, I couldn't get enough information from service manager like layer names and index numbers, etc.

What do you do usually? Do you have any recommendation?

RandallWilliams · Accepted Answer

I usually review the JSON representation. Disabling the services directory prevents sites from crawling the HTML representation, but apps still need to communicate via text/JSON, like:

http://sampleserver6.arcgisonline.com/arcgis/rest/services/Wildfire/FeatureServer?f=pjson