topic Re: User token privileges in ArcGIS Online Questions

User token privileges

infoklicconverter — Wed, 17 May 2023 14:46:10 GMT

Hi there,

Is it possible to have create a custom role in which the user doen not have the privilege to create a token via REST?

If that is the case how can I test for that, using the sef or username REST API endpoint?

Thanks,

Itay

Re: User token privileges

TonyContreras_Frisco_TX — Wed, 17 May 2023 17:12:37 GMT

I don't think this is possible, since the sign-in process uses the generate token operation in the background to authenticate the user. If a user couldn't generate a token, it would not be able to sign in. Here are the Privileges that can be assigned to custom roles in ArcGIS Online.

Re: User token privileges

infoklicconverter — Wed, 17 May 2023 17:27:22 GMT

That makes sense (just wanted to verify it) and I take it that this also applies to sing in with oauth2 + PKCE, right?

Re: User token privileges

TonyContreras_Frisco_TX — Wed, 17 May 2023 17:34:34 GMT

I would think so, but I can't say for sure.

Re: User token privileges

infoklicconverter — Wed, 17 May 2023 18:37:29 GMT

Well thanks anyway 👍