Which role permissions allow access to user.provisions property?

AaronKoelker — Fri, 03 Apr 2026 15:18:01 GMT

https://developers.arcgis.com/python/latest/api-reference/arcgis.gis.toc.html#arcgis.gis.User.provisions

Does anybody know what specific user permissions are needed to access the User.Provisions property (linked above) via the API? When I'm logged in with an admin account, I'm able to pull this property no problem. But we're trying to create a custom role for reporting purposes that can essentially only view all user information, not manage it, so that the script doesn't require a full admin account.

In the options for creating a custom role, the only permission I see related to licenses is under Admin -> Content -> Manage licenses, which is described as "Allow member to assign licenses to members of your portal." Enabling this lets me read the user.provisions property—but I'm wondering if there is another permission that would allow read-only? Separating out the ability to view and manage would be ideal.

Edit 4/3/2026—to add, while the permission mentioned above works for most things (even if it's not ideal because it also allows for assigning/revoking licenses), I do get an error when trying to read add-on license for admin accounts. Specifically in one ArcGIS Online org we have, but haven't seen the issue when running on Enterprise orgs. Have not been able to figure out which specific add-on or extension causes this, or whether it's some sort of license/extension inherent to admin accounts that non-admin accounts are not allowed to view in the API. I suspect it may be an organization extension like ArcGIS Velocity. The specific error is a 403: You do not have permissions to access this resource or perform this operation.

Would really appreciate some clarification or insight here

Re: Which role permissions allow access to user.provisions property?

AaronKoelker — Tue, 23 Jun 2026 15:29:15 GMT

For anyone else doing the same kind of work, it seems the user.provisions property doesn't report on any assigned ArcGIS Pro extensions. ArcGIS Pro itself will appear in the provisions if the user was given a license separately from their user type, but if they were also given Spatial Analyst (for example), it will not appear here. It appears you can only get those through the gis.admin.license class (which requires an admin account to access). So, while I thought the "Manage Licenses" user role privilege was a bit too broad, it actually does both too much and too little. It would be nice if the API could be updated to provide a simpler way to summarize/report on licenses, because currently the info is spread all over the place depending on portal type and license type and seems quite convoluted. But I understand the platform has evolved over time and this is how things go sometimes when you are building on top of an existing system.

If anyone could confirm, clarify, or elaborate, it would still be appreciated.

topic Re: Which role permissions allow access to user.provisions property? in ArcGIS API for Python Questions

Which role permissions allow access to user.provisions property?

Re: Which role permissions allow access to user.provisions property?