Hello,
I am encountering an issue when trying to access an organization-shared feature layer using a temporary token from an application. I have administrative privileges, which makes the result unexpected.
:gear: Application & Authentication Details
Platform: ArcGIS Online
Authentication Method: OAuth 2.0 Credentials (Standard application)
Credentials Used: Client ID, Client Secret, and a Temporary Access Token generated through a successful sign-in.
User Account: The token belongs to me (User A), and I have Administrative Privileges on the ArcGIS Online organization.
:prohibited: The Problem
| Scenario | Layer Owner | Layer Sharing | Token User | Result |
| Success | User A (Me) | My Content (Private) | User A (My Token) | Access Granted (As expected) |
| Failure | User B (Another Org Member) | Organization | User A (My Token) | Access Denied/Token Required (Getting a 401 or 403 error) |
Even though I am an administrator and the layer is shared organization-wide, my token fails to authorize access to the layer.
✅ Testing Performed
I have verified the layer is explicitly set to "Organization" sharing.
I created a test group, added both the layer owner (User B) and myself (User A), and shared the Feature Layer to this group which is created by User B and the application created by me (UserA)
I verified my application is also shared with the organization.
Result of Group Test: Still unable to access the Feature Layer using my temporary token.
🎯 Primary Question
Given that the temporary token is associated with an authenticated organizational member who has administrator privileges, and the layer is shared with the entire organization, what common security setting or configuration could be blocking access?
💡 Secondary Question (Seeking Alternative Solutions)
What is the recommended best practice or alternative authentication method for a common application to reliably access all items shared at the Organization Level?
Thanks
Ayush
