topic Re: Repoter App - Securing hosted feature layer in ArcGIS Instant Apps Questions

Reporter App - Securing hosted feature layer

MCostley — Mon, 02 Mar 2026 18:00:22 GMT

I need to set up a reporter app for data collection from the public with users' names, emails and phone numbers. I realize I can have that data hidden from the map using views, but the underlying REST endpoint is still public with the sensitive info.

I tried setting up limited access using this method: https://support.esri.com/en-us/knowledge-base/how-to-limit-access-to-secured-hosted-services-or-map-s-000017029 but once the layer is created, reporter is throwing an error that the layer isn't editable.

Is there a way to configure public data collection that actually keeps the data secure, similar to Survey 123?

Re: Repoter App - Securing hosted feature layer

StephanieW — Mon, 02 Mar 2026 16:46:09 GMT

Hi @MCostley this sounds like BUG-000183128: Reporter Instant App displays error message "Web map does not contain any editable layers." when there is a feature layer with sublayers in the web map with the Update setting disabled. The bug is currently under review but enabling the update setting may be a viable workaround until the bug is fixed.

Re: Reporter App - Securing hosted feature layer

LakesGISMaps — Mon, 02 Mar 2026 18:16:38 GMT

@MCostley We have been able to do this by adding our editable secured service as an item in AGOL by embedding credentials and then going to the settings of the new item and select "Limit usage" and only allow usage of the item by placing the url of the app that the public uses. This will only allow access of the item through the app and not allow anyone from the public access to it by any other means in AGOL.

Re: Reporter App - Securing hosted feature layer

BethRomero — Mon, 02 Mar 2026 22:19:48 GMT

@MCostley is your editable data a sublayer in a group? We are looking into an issue, and this could be related if it's grouped.

Re: Reporter App - Securing hosted feature layer

MCostley — Tue, 03 Mar 2026 14:16:01 GMT

Yes I believe this was it! Thank you. I republished the layer separately and it seems to be working now.