role

A role is a collection of privileges assigned to a memberMember is an individual with an ArcGIS account who can sign in, access tools and applications, and collaborate with other organization members in a portal.Learn more of an ArcGIS Online or ArcGIS Enterprise organization that defines the workflows and capabilities available to them within the limits of their user type. Roles grant specific privilegesPrivileges are a set of permissions assigned to ArcGIS accounts, developer credentials, and applications that grant access to secure resources and functionality in ArcGIS.Learn more to members that enable them to perform various tasks, such as viewing data, creating content, sharing items, or administering the organization.

The user typeUser type is a foundational licensing tier assigned to a member of an ArcGIS organization that determines their access to core apps and services, and establishes the privileges and roles available to them in a portal.Learn more of a member determines the roles that can be assigned to them. All members of an organization must be assigned exactly one role.

Organizations can use default roles, or create custom roles to tailor permissions to specific workflows.

1. Default roles: These roles are available by default, and include privileges that match typical tasks in an organization.

   Some common default roles for ArcGIS Online and ArcGIS Enterprise include:

   • Viewer: Can view shared content.
   • Data Editor: Can edit shared data layers.
   • User: Can create and share items.
   • Publisher: Can publish and share hosted data layers.
   • Administrator: Full privileges to manage the organization, including members, roles, licenses, and settings.

2. Custom roles: Custom roles are created by organization administrators to assign specific privileges to members. One common use case for custom roles is a custom "Developer" role that allows developers within an organization to create and manage developer credentialsDeveloper credentials are a type of item in a portal that contains parameters for authentication. There are two types of developer credentials: API key credentials and OAuth credentials.Learn more.

   To learn how to create and manage custom roles, go to the ArcGIS Online or ArcGIS Enterprise documentation.