topic Re: Allow user to only view items shared with their Group in ArcGIS Online Questions

Allow user to only view items shared with their Group

Lake_Worth_BeachAdmin — Tue, 13 Feb 2018 18:13:50 GMT

I want to accomplish the following:

- create a group in AGOL

- add a new user to this group (only member of this new group)

- only allow this user to view (or edit depending on data I share) to items that are shared with the group

- do not allow this user to view/edit any other items ion the Organization (excluding public view able data)

the issue I am having: once I add this new user to my organization, I add them to the new group and share items with the group respectively. HOWEVER, the new user will also be allowed to view other items in the Organization (even if the items are not publicly view able).

How can I set properties/create group to only allow a user to view items that are shared with that group

Re: Allow user to only view items shared with their Group

Anonymous User — Tue, 13 Feb 2018 21:03:46 GMT

Create a custom role (you can use viewer as the template) and remove the ability to "view groups shared with the organization". Without this privilege they will only be able to see groups they are a member of.

You probably also want to uncheck "view content shared with the organization", That way content outside of groups that has been shared with the organization is also inaccessible to them.

Depending on your scenario you could also consider unchecking "view" under members. This means they won't be able to see the list of members in your organization on the organization page.

Re: Allow user to only view items shared with their Group

Lake_Worth_BeachAdmin — Tue, 13 Feb 2018 21:27:10 GMT

thank you KCullen-esristaff‌ for the great response! this is exactly what I was looking for!

Re: Allow user to only view items shared with their Group

Anonymous User — Mon, 21 May 2018 18:12:31 GMT

This is exactly what I was looking for too. Thanks Katie!!

However, when I apply the changes as stated above, the user can still go to Content > My Organization and view content that is not shared with their group. I only want them to view content shared with the group. Any thoughts on how I can resolve this?

Re: Allow user to only view items shared with their Group

Anonymous User — Mon, 21 May 2018 18:15:03 GMT

Did you also uncheck "view content shared with the organization"? If you want you can share a screen shot of how you configured your custom role.

Re: Allow user to only view items shared with their Group

Anonymous User — Mon, 21 May 2018 21:59:59 GMT

Yes, below is a screenshot. It is not showing all of the organization's content, only a few random maps and layers. I am not seeing a reason why these are view able, but the other content is not.

Re: Allow user to only view items shared with their Group

Anonymous User — Mon, 21 May 2018 22:02:50 GMT

Is the content they can see shared publicly? The user will still be able to see public content.

Re: Allow user to only view items shared with their Group

Anonymous User — Thu, 24 May 2018 22:54:02 GMT

Yes, it was shared publicly. That was why. Thanks for the help!

Re: Allow user to only view items shared with their Group

JacobMcCoy1 — Wed, 15 Jul 2020 14:19:42 GMT

Hello, thank you for this discussion. I am experiencing the same issue as Jake but I DO NOT want members within certain groups to be able to even view publicly shared content. I want them to be editors within their own group but not for other layers outside of their group. I have to keep certain layers within the whole organization public because they are shared on our website for the community to use, but I don't want others to be able to edit them. Does this make sense? Is there a work-a-round for that?

Re: Allow user to only view items shared with their Group

JacobMcCoy1 — Wed, 15 Jul 2020 14:23:18 GMT

I hope the development team can add an option for a group member to only be able to view/edit content shared to their group. Thank you.

Re: Allow user to only view items shared with their Group

BrianDudek1 — Tue, 25 Aug 2020 20:50:23 GMT

Yes this would be a nice option to have as well. Group viewers can still view the public Portal organizational items rather than just the items shared to their group.

For the editing, I think you can enable edit capabilities on the custom role, but then only enable editing on the feature layers shared to the specific group. They shouldn't be able to go in and start editing other layers not shared to the group...I think.

Re: Allow user to only view items shared with their Group

SimonSchütte_ct — Thu, 18 Nov 2021 14:07:37 GMT

I can not find the settings mentioned here in the latest AGOL release. Is there any way to disable the View permissions mentioned here for a role?