It would be super helpful if there was a switch user option on the Portal sign-in. As an admin, we often work with several accounts and it would be nice to just be able to switch users instead of completely signing in or out.
@JonahLay I work for several universities and therefore have several ArcGIS accounts. It would be so helpful to have a functionality to simply switch between accounts!
I second what @RandyCasey and @MarlenaIsley said.In our organization, I have both my individual account where I'm a portal admin, and then a group account which owns /should own most of the authoritative content so that it's all in one place and can be managed and updated as need without someone having to go find the item, change the ownership, then update it. Plus, we as leads and admins need to test workflows with various Portal Roles and permissions to make sure users can do their work without hitting a permissions snag.
If what we're asking for won't work (switching users), what CAN be done to alleviate these issues?
@JonahLay I get that there are technical issues surrounding profiles, especially when talking about AD, SAML, etc., but there has to be a better or more efficient way to allow managers/users (as in we are both), like me, to be able to work on projects AND administer using separate accounts. We simply cannot tie every administrative function and task to our user accounts nor can we or should we work as an administrator all the time; it simply isn't feasible or sustainable. Yes, we can log into ArcGIS Pro under different usernames, AD accounts, etc., but we have to sign out of one account to sign into another account, and when we do that, every open session we have on the same machine signs us out simultaneously. Could you find a way around that? For instance, allow for two, separate, installs on the same machine, each tied to a different user? like when my browser allows me multiple profiles on the same machine which can be open simultaneously, which allows me to perform administrative functions on our Portal, all while never signing out of my user profile. I know, it's not the same, but that is the functionality I am looking for. Signing in and out of ArcGIS Pro is not an efficient use of my time, and it leaves room for errors like forgetting to sign out as an administrator and working under the wrong profile. The only work-a-round I have found is to remote into another machine as the admin and perform all admin work on that machine, but that requires a separate machine, which is a cost and a resource that not every organization can justify.
I'm probably off here, but I just feel like this issue is similar to Office 365 desktop, where you can sign into any Office application under as many users accounts as you like (organizational and/or private), your credentials are saved in the Credential Manager keychain, and then simply just click the "Switch Accounts" button to work under a different profile. Isn't something like this possible for ArcGIS Pro?
@feralcatcolonist_old Web browsers don't seem to support switching between a SAML and built-in account, so it probably wouldn't work in Pro either. Switching between a built-in account to another built-in account could potentially be supported.
@JonahLay, is switching from a SAML to a static/built-in account still on the figurative table; also built-in to built-in?
My organization has these use-cases:
Hi everyone,
Just so that you are aware, there are portions of this idea that cannot be supported. Instead, there are also workarounds that might be helpful to know.
Best,
Jonah
1000 times this. We have an authoritative built-in account for our Portal, by and large everyone else uses their Active Directory with SAML to access things. As the administrator some of my services need to be launched from my user for testing or temporary projects; other times, it is easier to log in as the built-in to publish the services directly.
Right now I'm signing in and out of my SAML to the built-in (which I have to open a password manager to copy/paste the extra long credential) and it would be a lot easier if we had a switch button to do the thing. As we expand the use of our portal I'd like to make additional built-ins to handle some of the ho-hum tasks like creating editing applications and other publishing stuff. We over-use the admin accounts currently.
@MatthewLawson1 You don't need to delete a portal connection to authenticate a different user; you can sign out of one account and sign in to another.
There was a recent request to add an option to switch users. Can you confirm that this is the same functionality you would like to see implemented? If so, this idea can be merged. Here is the idea: https://community.esri.com/t5/arcgis-pro-ideas/switch-user-option/idi-p/1209863
Thank you all for sharing more details about this request. We will continue to evaluate this.
I'm changing the status to Open to allow others to add their votes. Please continue to share any additional feedback you may have. Thank you!
You can connect to multiple, but only one can be set as the "active" portal. Can you give more details about the service you're publishing?
I recently used Pro to create a map that used resources from two portals, and it worked just fine, but I've not attempted to publish anything that way.
ArcPro can only connect to one portal at a time. This makes it impossible to create and publish a service that consumes content from both AGOL and Enterprise Portal. Can you please enable multiple simultaneous 'portal' connections?
The problems described sound familiar. I would love to see a solution, tooI was working with the ArcGIS Assistant some time ago and thought: this Account switcher (but within the same Portal) would be really neat in Arcgis Pro, too:https://guide.assistant.esri-ps.com/docs/working-with-accounts(The example even is the publisher/admin use case)
Thanks @rsun_TQB and @RandyCasey .
@rumpolda @wayfaringrob and @AlfredBaldenweck let us know if your situations are similar to those described above or if your reasons for requesting this option are unique. Thank you!
@JonahLay @KoryKramer
Here is my use present use case:
In order to maintain organizational control and management of items on our Portals (Enterprise and AGOL) we have an admin account that this tied to our AD admin account, which is accessed by our systems admin (me) and our division manager. By doing this, this admin account can take ownership of, manage/maintain, and consolidate items under one user on the Portal. This is crucial, as in the beginning, we found that having authoritative feature services scattered around multiple users accounts made managing critical data incredibly difficult. When major changes to items were needed (updating a features service, changing permissions, modifying groups), ownership had to be changed, which slowed down the process. Also, just searching for the appropriate service to change ownership took too long, as every user has their own naming conventions. We also found that settings and permissions were not appropriate on a lot of important feature services, risking unintended data changes and/or data loss. Placing all items that needed strict management and control under one account made these issues go away.
At first, my account was being used for this. But as time went on, I was having difficulty managing my own personal projects and our organizational items. Not to mention, if my manager needed to make any changes to any organizational items, he would have to change ownership of those items. We then tried using the site admin account that was created when we first installed Portal, but this caused issues with ArcGIS server, as the owner of the item in Portal was not an account that ArcGIS Server could access, so managing services on our ArcGIS Servers was complicated, if not impossible. So an admin account using our AD admin account was created. This resolved all of our data management issues.
We also found that since we were often accessing our servers under our AD admin account, having the Portal login tied to that account made accessing Portal easier when access was needed (which we found was often), since the AD account was tied to our SAML login service.
Lastly, we had a secure account to store items of staff who have left our organization. When staff leave, we can go in and transfer all items to our admin account. Prior to this, someone had to volunteer to take on storing their orphaned items.
The one drawback is that when we do anything in ArcGIS Pro, we log into a machine under our admin account so that the Portal login is more seamless. This is the most efficient method for us, as the only other method is to sign out of Portal, which disconnects the named user license, change the license type to Concurrent, then sign back into Portal using the ArcGIS Login (because the SAML SSO option automatically defaults to my user login). This takes way longer than just logging into an admin machine under our admin account.
But, if ArcGIS Pro had the ability to store multiple Portal logins, and maintain the appropriate licensing setup with those logins, then all I would have to do is just switch profiles when I needed to put on my admin hat and perform any admin duties. I mean, I can do this on Edge and Chrome (change profiles) when I need to log into Portal as an admin, which is incredibly useful, so why not in ArcGIS Pro?
Hi @KoryKramer @JonahLay ,
I just simply see the potential of having the ability to switch between different users when using ArcGIS Pro.
I am Portal Admin and DBA at my organization.
My organization uses SAML for authentication as well, and it is not possible or easy for me to change AD account within Pro to remove locks of our EGDB. My named account doesn't have the power to remove locks of our EGDB, and for cybersecurity reasons...my named account should not have this level of permission of our EGDB. Therefore, we always need to log out on Windows and re-log on with DBA AD account to remove the locks.
Another thing I am thinking may be handy with this feature is to test out different user types or privileges configuration is working properly without calling the end users to test it out.
I simply see features on technology like Gmail or future Microsoft 365 on Microsoft Edge to allow its user to switch between account and remember their custom environment configurations make admin or even some end users life easier. AD accounts or Portal accounts were given different privileges and permissions in order to achieve separation of concerns, but in real word operations these accounts may potentially all belong to the same worker or admin.
Hope this help a little bit 🙂
+ @AlfredBaldenweck @wayfaringrob @rumpolda and @rsun_TQB Please see Jonah's question above - since you're also requesting this functionality, it sounds like better understanding everyone's use cases will be helpful.
Thank you!
@MarlenaIsley @RandyCasey Thank you for your idea and feedbacks. We would like to know more details before considering this enhancement. Why are admins needing to switch between multiple users in Pro? Is there a specific workflow that requires this? Any additional information you can provide would be helpful.
Thank you,
I cannot "Kudos" this enough! Signing out and back in again is not an easy task when you are on SAML for authentication, as Pro just keeps using the Windows account for SSO. Yes, you can use the browser option, but that can also get locked into the SSO as well. Maybe allowing for multiple ArcGIS Pro profiles would be a great solution? This option would allow you to set up Pro differently for each login. Even better, allow you to sync the profile to Enterprise or AGOL, so that if the user, like me, logs in to different machines regularly, the profile can be synced automatically. The profile should also include the license type (whether Named User License, or Concurrent) so that you don't have to keep changing license types if one profile uses a different license type than the other.
Meld je aan om te posten, content te volgen en meer. Nieuw hier? Registreer gratis.
