User token privileges

[infoklicconverter]

Hi there,

Is it possible to have create a custom role in which the user doen not have the privilege to create a token via REST?

If that is the case how can I test for that, using the sef or username REST API endpoint?

Thanks,

Itay

[TonyContreras_Frisco_TX]

I don't think this is possible, since the sign-in process uses the generate token operation in the background to authenticate the user. If a user couldn't generate a token, it would not be able to sign in. Here are the Privileges that can be assigned to custom roles in ArcGIS Online.

[infoklicconverter]

That makes sense (just wanted to verify it) and I take it that this also applies to sing in with oauth2 + PKCE, right?

[TonyContreras_Frisco_TX]

I would think so, but I can't say for sure.

[infoklicconverter]

Well thanks anyway 👍