Privileges

Privileges are a set of strings used to manage access to secure resources in ArcGIS. They are assigned to two types of entities:

  1. ArcGIS accounts used by ArcGIS users.
  2. Access tokens used by applications.

Privileges for accounts

All ArcGIS accounts have a list of privileges associated with them that determine the services, content, and operations the user is authorized to access. These privileges are managed through roles, typically assigned to members by an organization administrator.

Privileges for access tokens

All access tokens have a list of privileges associated with them that determine the services, content, and operations an application is authorized to access. Privileges for access tokens are managed differently based on the type of authentication used to obtain them:

Type of authenticationType of developer credentialsPrivilege managementAvailable privileges
API key authenticationAPI key credentialsAccess token privileges are managed through developer credentials.Location services, Data services (Item access)
App authenticationOAuth credentialsAccess token privileges are managed through developer credentials.Location services, Data services (Item access)
User authenticationOAuth credentialsAccess token inherits all privileges of the signed-in ArcGIS user.Location services, Analysis services, Portal service (General and Admin), Data services (Item access)

The privileges available to you as a developer depend on the type of ArcGIS account you have and the roles assigned to it. This page documents all of the privileges available to ArcGIS Location Platform, ArcGIS Online, and ArcGIS Enterprise accounts.

List of privileges

ArcGIS Location Platform accountsArcGIS Online accountsArcGIS Enterprise accounts
CategoryLabelPrivilege stringDescription
BasemapsBasemap styles servicepremium:user:basemapsAllow application to access the basemap styles service.
BasemapsStatic basemap tiles (beta)premium:user:staticbasemaptilesAllow application to access the static basemap tiles service.
Data enrichmentGeoEnrichment servicepremium:user:geoenrichmentAllow application to access the GeoEnrichment service. Learn more
ElevationElevation service (beta)premium:user:elevationAllow application to access the elevation service.
GeocodingGeocode (stored)premium:user:geocode:storedAllow application to access the geocoding service and perform stored geocodes. Learn more
GeocodingGeocode (not stored)premium:user:geocode:temporaryAllow application to access the geocoding service and perform geocodes that are not stored. Learn more
PlacesPlace findingpremium:user:placesAllow application to access the places service. Learn more
RoutingRoutingpremium:user:networkanalysis:routingAllow application to access the routing service and perform standard routing operations. Learn more
RoutingClosest facilitypremium:user:networkanalysis:closestfacilityAllow application to access the routing service and perform closest facility routing operations. Learn more
RoutingLocation allocationpremium:user:networkanalysis:locationallocationAllow application to access the routing service and perform location allocation operations. Learn more
RoutingOptimized routingpremium:user:networkanalysis:optimizedroutingAllow application to access the routing service and perform optimized routing operations. Learn more
RoutingOrigin/destination cost matrixpremium:user:networkanalysis:origindestinationcostmatrixAllow application to access the routing service and generate travel cost matrices. Learn more
RoutingService areapremium:user:networkanalysis:serviceareaAllow application to access the routing service and generate service areas. Learn more
RoutingMulti-vehicle routingpremium:user:networkanalysis:vehicleroutingAllow application to access the routing service and perform fleet routing operations. Learn more
RoutingLast milepremium:user:networkanalysis:lastmiledeliveryAllow application to access the routing service and perform routing operations for last mile delivery. Learn more
CategoryLabelPrivilege stringDescription
BasemapsBasemap styles servicepremium:user:basemapsAllow application to access the basemap styles service.
Data enrichmentGeoEnrichment servicepremium:user:geoenrichmentAllow application to access the GeoEnrichment service. Learn more
GeocodingGeocode servicepremium:user:geocodeAllow application to access the geocoding service. Learn more
RoutingRouting (Network analysis)premium:user:networkanalysisAllow application to access the routing service. Learn more
RoutingLast milepremium:user:networkanalysis:lastmiledeliveryAllow application to access the routing service and perform routing operations for last mile delivery. Learn more
CategoryLabelPrivilege stringDescription
Feature analysisSpatial analysis servicepremium:user:spatialanalysisAllow application to access the spatial analysis service. Learn more
ContentCreate, update, and deleteportal:user:createItemAllow member to create, edit, and delete their own content. Learn more
ContentPublish hosted feature layersportal:publisher:publishFeaturesAllow member to publish hosted feature layers from shapefiles, CSVs, etc. Learn more
Image analysisImage analysis servicepremium:publisher:rasteranalysisAllow application to access image services to perform analysis. Learn more
ContentPublished hosted tiled imagery layersportal:publisher:publishTiledImageryAllow application to publish hosted tiled imagery layers from a single image or collection of images. Learn more
ContentPublish hosted dynamic imagery layersportal:publisher:publishDynamicImageryAllow application to publish hosted dynamic imagery layers from a single image or collection of images. Learn more

Tutorials

Create an API key

Create and configure API key credentials to get a long-lived API key access token.


Create OAuth credentials for user authentication

Create and configure OAuth credentials to set up user authentication.


Create OAuth credentials for app authentication

Create and configure OAuth credentials to set up app authentication.


Your browser is no longer supported. Please upgrade your browser for the best experience. See our browser deprecation post for more details.