Restrict Publisher from accessing Server Manager

xingchenc

Hi Everyone,

Is there a way to block Publisher from accessing the server manager site?

Our server is currently federated into Portal, and any user with Publisher role in portal can log into server manager. It's a potential sercurity risk because they can modify quite a few settings as well as stop system GP service if they intend to, i.e. causing system down if they decide to stop the publishing GP service.

While we need those users in the Publisher role because they need to publish resources in Portal, so this leaves us wondering if there is a setting to restrict users other than Admin from log into server manager?

Please let me what you think and is there a workaround here?

~~~~~

Updated：Created a post in the idea section, hope this gets ESRI staff's attention.

Restrict Publisher's Capability in ArcGIS Server M... - Esri Community

JordanCarmona

Does setting your federated server to Federated Server With Restricted Publishing  resolve this issue? This is not anything that I had considered until I had a conversation with a coworker on the subject.

This was a known issue with standalone ArcGIS Server and prevented publishers from being granted limited access to folders; i.e. any publisher has a skeleton key to all folders. This severely restricts how we're able to manage services.

I just had this conversation at work today because this is a current workflow is not managed by the administration staff within our Enterprise deployment and I was:

1. shocked

2. horrified that this wasn't resolved

Being an admin with organizations that didn't use publishers this had never occurred to me.

https://enterprise.arcgis.com/en/server/latest/deploy/windows/administer-a-federated-server.htm#:~:text=Federated%20Server%20With%20Restricted%20Publishing