topic Re: Admin credentials for Consultant in ArcGIS Online Questions

Admin credentials for Consultant

adminUtility — Fri, 19 May 2023 16:26:35 GMT

Hello Community,

I work for a municipality and another department sources their GIS to a consultant. This consultant wants my admin credentials to publish and manage data, create dashboards etc. I'm concerned as there is a lot of data they should not have access. Is there a way to give them access while limiting their access in other ways.

Thanks in advance for your assistance. Jessica

Re: Admin credentials for Consultant

AyanPalit — Fri, 19 May 2023 16:34:26 GMT

@adminUtility sharing individual credentials is a strict No. It violates all security/business norms. You can always create a new user credential for the contractor/consultant and grant them required role/privileges.

Re: Admin credentials for Consultant

CoffeeforClosers — Fri, 19 May 2023 16:38:54 GMT

You should adhere to the principle of least privilege: only give users access to the minimum level necessary for them to perform their tasks.

Create a custom role for this consultant.

Re: Admin credentials for Consultant

Joshua-Young — Fri, 19 May 2023 16:50:41 GMT

I would go with the least privilages mindset. Creating a new member role for the consultant and give the role only the permissions that they absolutely need to have to do their work would be my recommendation. Then assign that role to a new account for the consultant. This gives you complete control over what they can do. This requires more thought and coordination up front but is the most secure way to go about it.

If they absolutetly have to have administrative access, I would still create their own admin account. Sharing admin credentials is usually not recommended.

Re: Admin credentials for Consultant

LeslieUK — Mon, 22 May 2023 15:10:43 GMT

As stated above, it is not ideal to give admin permissions away. If this needs to be done, a custom role is probably the way to go:

Configure member roles—ArcGIS Online Help | Documentation

Re: Admin credentials for Consultant

adminUtility — Mon, 22 May 2023 18:43:43 GMT

Yes, thanks. You are right.

Re: Admin credentials for Consultant

adminUtility — Mon, 22 May 2023 18:44:12 GMT

I think creating a role is the way to go. Thanks

Re: Admin credentials for Consultant

adminUtility — Mon, 22 May 2023 18:44:34 GMT

Thanks