idea Simplify AGE security model in terms of data governance in ArcGIS Enterprise Ideas

Simplify AGE security model in terms of data governance

PancovaMarketa — Thu, 04 Jun 2026 12:34:21 GMT

Current state:

Our company (Prague Airport) has a complex AGE deployment. We are maintaining multiple web apps containing web maps and map services. In each of the apps a different agenda is being managed, and the data is accessed/viewed/edited by users in user groups with specific privileges.

It is very difficult and time consuming to maintain these apps and keep them up-to-date. If we need to make a simple change, we need to update each of the apps one by one. Imagine the amount of work when we currently manage 12+ applications.

Idea:

We would appreciate having an environment where the data governance was simplified.

We suggest a solution to use a single service, a single map and a single app – with settings similar to security proxy, that ensure the users see only items specific to their user group.

This solution could be applied on:

Layers: A map with multiple layers where each user could only see a subset of them.

Fields and domains within a service: A particular user (or the public) could only see a subset of fields.

Applications: A security proxy could control capabilities based on user groups. For example, to prevent users who manage power line data from seeing and editing waterpipes.

Widgets in apps: It would be great if the security configuration could allow the app to enable/disable widgets dynamically on load.

This approach would make item and data management more flexible, efficient and easier to maintain.

Can you please consider changing the security model as described?

@VHolubec @RomanJanecek @JanDlouhy

Re: Simplify AGE security model in terms of data governance

Joshua-Young — Mon, 29 Jun 2026 21:10:12 GMT

Another example that comes to mind is the Special Event Operations solution from ArcGIS Solutions. We recently deployed this solution and in the solution there is one service, one map, and one app for people to edit what is happening with an event. After showing the solution to Fire, Parks, Police, and Public Works they pointed out that are different aspects that each department is responsible for and they were concerned with accidentally modifying some other departments edits. Currently, I will have to recreate the solution by making copies of the service, map, and app for each department so that each department can edit what they need to but still see what the other departments are doing for overall operational context.

It would save so much time to be able to even at just the service level control edits and views for different groups and that propagates up through the map and app. Then I have just one service, map, and app to manage special event operations but different controls for the different groups accessing it.

Re: Simplify AGE security model in terms of data governance

SimonSchütte_ct — Tue, 30 Jun 2026 04:00:46 GMT

Valid idea and use cases. This is currently only supported via custom SOI Integration | SOEs and SOIs | ArcGIS Architecture Center.
If you need something right away, you can find a suitable Partner Solution here: security.manager NEXT by con terra GmbH | Esri Partner Solution.

Similar idea: https://community.esri.com/t5/arcgis-pro-ideas/access-permissions-on-versioned-services-need-to/idi-p/1709842