Hey — yep, this is definitely doable, and I’ve set up similar centralized Enterprise Sites for role-based app access.
The good news is that ArcGIS Enterprise Sites (11.5) respects item-level sharing, so if an application card links to an app the user doesn’t have access to (via item sharing or group membership), they simply won’t see it — as long as you’re using dynamic content blocks like galleries or category-driven views.
That said, if you’re adding static app cards manually, then yes — all users will see the cards unless you configure visibility rules.
Here’s what you can do:
Share apps to specific Portal groups, and then
Use content blocks in the site that are filtered by group or category.
You can also use visibility settings on individual cards if you’re manually building the site layout. It takes more setup but gives you fine control.
There’s a solid Esri doc here that covers this:
🔗 Manage visibility and user access in ArcGIS Enterprise Sites
So yes — you can absolutely tailor what each user sees on the site based on group memberships and item sharing.
Let me know if you want to walk through an example setup — happy to help.
– Venkat