topic SDE permissions to groups in ArcGIS Enterprise Questions

SDE permissions to groups

LisaT — Wed, 24 Apr 2019 18:07:46 GMT

I can't seem to figure out how to add Active Directory groups to my SDE database in 10.6. In Catalog, I can go to "Administration" and "Add User", but those are for individual users. The only way I can fathom is to connect to SQL Studio Manager and add the group manually to the database and tables. However, there are all sorts of schema tables and stored procedures that seem to need to be added. Doesn't seem like that is the proper way to do it. Any suggestions?

We are using 10.6 and have SQL. The database is an .sde database.

Re: SDE permissions to groups

George_Thompson — Wed, 24 Apr 2019 19:09:49 GMT

You can add AD groups that are available in SQL Server via Catalog. You have to add the AD group(s) to the SQL Server instance first and map them to the SQL DB. The ArcGIS client does NOT add them to the SQL Server instance. Once it is mapped, the data owner can then add the AD group via the workflow above.

This also would apply to ArcGIS Pro client. Hopefully this helps.

Geodatabase‌

Re: SDE permissions to groups

LisaT — Wed, 24 Apr 2019 19:52:36 GMT

Thanks, George. I guess my question is what the "workflow above" is. I think I figured it out. I guess I have to connect manually to the database in SQL Management Studio (don't need to relate to the tables). Then open Catalog and skip the step of adding the user to the database in Catalog but relate the tables to the user from there. So: right-click on each table and go to "manage" and then "privileges". This allows me to select permissions on each table and will also add the user to any related schema/stored procedure tables.

Re: SDE permissions to groups

George_Thompson — Wed, 24 Apr 2019 19:53:55 GMT

Correct