Assign user type and role based on group membership?

[SimonSchütte_ct]

We can specify the "New Member Defaults", however user Types and Roles specified here apply for all new users and manual adjustments are necessary if other User Types or Roles are needed.

This is impractical for large organisations. I´d like to be able to use e.g. SAML group memberships Invite and add members—ArcGIS Online Help | Documentation To Assign a Mobile Worker User Type to all People that are part of the Mobile Worker group and a Creator User Type to all users in the GIS-Creator group. Everyone else will get a Viewer User Type and role.

[JustinMallinckrodt]

Hello Simon,

I just want to confirm your request. We understand how new member defaults work, but you'd like to apply these settings to existing users, in bulk?

You can complete this action using the REST API - How To: Update User Roles in the ArcGIS Portal Directory ; Or you can use ArcGIS API for Python for something like this:

from arcgis.gis import GIS

gis = GIS("https://your-portal-url.com/portal", "admin_user", "password")

# Example: Update role and user type for multiple users

usernames = ["user1", "user2", "user3"]

new_role = "org_publisher"

new_user_type = "creatorUT"

for username in usernames:

    user = gis.users.get(username)

    user.update_role(role=new_role)

    user.update(user_type=new_user_type)

[SimonSchütte_ct]

Hi Justin,
thank you, I am aware of the REST API and CLI tools.
What I am looking for is a more integrated and fully automated approach that does not rely on custom code or workarounds.

ArcGIS Enterprise should fully support centralised management of users, roles, and user types through the enterprise Identity Provider, eliminating the need alternate ways of configuration.

I created an idea, which can be found here: Centralised management of (users), ArcGIS User Typ... - Esri Community