https://developers.arcgis.com/python/latest/api-reference/arcgis.gis.toc.html#arcgis.gis.User.provis...
Does anybody know what specific user permissions are needed to access the User.Provisions property (linked above) via the API? When I'm logged in with an admin account, I'm able to pull this property no problem. But we're trying to create a custom role for reporting purposes that can essentially only view all user information, not manage it, so that the script doesn't require a full admin account.
In the options for creating a custom role, the only permission I see related to licenses is under Admin -> Content -> Manage licenses, which is described as "Allow member to assign licenses to members of your portal." Enabling this lets me read the user.provisions property—but I'm wondering if there is another permission that would allow read-only? Separating out the ability to view and manage would be ideal.
Edit 4/3/2026—to add, while the permission mentioned above works for most things (even if it's not ideal because it also allows for assigning/revoking licenses), I do get an error when trying to read add-on license for admin accounts. Specifically in one ArcGIS Online org we have, but haven't seen the issue when running on Enterprise orgs. Have not been able to figure out which specific add-on or extension causes this, or whether it's some sort of license/extension inherent to admin accounts that non-admin accounts are not allowed to view in the API. I suspect it may be an organization extension like ArcGIS Velocity. The specific error is a 403: You do not have permissions to access this resource or perform this operation.
Would really appreciate some clarification or insight here
-Aaron
