Will federation change ability of Portal Viewer licenses to edit in Geocortex Essentials sites?
We currently have Geocortex Essentials 4.14.3 authenticated with Portal 10.8.1, which is integrated with IWA so users use their AD accounts to sign in. I’ve been told we are unable to implement SAML for SSO so we don’t have that. We are unfederated but are looking at federation and I’m researching how this might change things for us.
Right now, we enjoy that fact that Portal users who edit in Geocortex Essentials can do so with a Viewer user type license. We reserve Creator user type licenses for people who edit in Esri products (ie Field Maps).
I've started using Workflow and Reporting 5 items, and I've found in Essentials sites that Viewer level users can edit with these no problem. I have not used Web Viewer to build a site yet but it's next on my steps going forward.
1. Will a Viewer level user be able to edit inside a workflow in Web Viewer?
2. Will this change post federation?
Any help is much appreciated!
-
Hi Emily, are you referring to feature editing in a workflow? If so, then yes, a data editor role or greater is necessary to edit and update a feature service in your ArcGIS Server. This is dictated by Esri's ArcGIS Enterprise user types: User types, roles, and privileges—Portal for ArcGIS | Documentation for ArcGIS Enterprise
So, to answer your questions:
1. No, a viewer access isn't enough - it must be data editor or greater to edit a feature service from ArcGIS Enterprise.
2. Yes, this would change post federation of your ArcGIS Server: you're changing the identity provider for the ArcGIS Server and adopting Esri's ArcGIS Enterprise User Types. Esri's pattern here dictates how you interact with your now federated ArcGIS Server.
1 -
Thanks for your reply Gareth! Yes, I was talking about feature editing.
This is good info to know, we're a ways yet from using Web Viewer but we know it's down the road.
So to clarify, we have Viewer level portal users who do feature editing inside a 5-series workflow in a Geocortex Essentials site and that is working fine for us now. But after federation, those user would need to have Creator level licenses with at least a Data Editor role, even if they're still editing in a 5-series workflow inside a Geocortex Essentials site.
0 -
Hey Emily Renkema, super welcome.
Yes, you're correct - a Workflow making edits to a Portal-secured (e.g. from an ArcGIS server federated with Portal) feature service requires a user type that has feature editing access.
There's nuance here: what I'm referring to is the ArcGIS Server requiring these user types per Esri's ArcGIS Enterprise licensing model. Anecdotally, we've seen several customers resistant to the idea of adopting the ArcGIS Enterprise user model because the cost of the required user types is significantly more expensive. You're not alone in being wary around this move from token ArcGIS Server to the federated ArcGIS Enterprise paradigm.
For context, there's three 'things' in this scenario that could be federated with your ArcGIS Enterprise (Portal): your ArcGIS Server, your Geocortex Essentials server and your Geocortex 5-series Workflow server - which is now called VertiGIS Studio Workflow.
To break that down:
- ArcGIS Server federation, per Esri's docs: Federate an ArcGIS Server site with your portal—Portal for ArcGIS | Documentation for ArcGIS Enterprise
- The behaviour around feature editing requiring a specific Portal user type is a result of the federation of the ArcGIS Server with your ArcGIS Enterprise (Portal) - Geocortex Essentials sign in via ArcGIS Enterprise (Portal - sometimes referred to as “Portal federation) , how-to in our docs: Essentials Install - Choose a Method to Sign In to Manager (vertigisstudio.com)
- This permits Geocortex Essentials to sign in via your portal identities and consume private portal content - VertiGIS Studio Workflow sign in to portal, per our docs: Workflow Help - Install VertiGIS Studio Workflow on Premises (vertigisstudio.com)
- this permits Workflow to publish and consume workflows (app items) from your portal
So, just to reiterate that change in requirements around user types for feature editing is entirely dictated by Esri's ArcGIS Enterprise licensing model. This is a classic problem we've seen come up when historically customers have been just fine using an Essentials site with a token ArcGIS Server.
I'd encourage you to federate all three with your ArcGIS Enterprise setup. This is the accepted industry paradigm and is fundamental to the VertiGIS Studio suite as we build ontop of the ArcGIS Enterprise/ArcGIS Online platform.
Please do let me know if this makes sense. If you've got further questions or need a hand getting this all done, it may be worth engaging someone from our Support team as they have a great amount of experience around this.
1 - ArcGIS Server federation, per Esri's docs: Federate an ArcGIS Server site with your portal—Portal for ArcGIS | Documentation for ArcGIS Enterprise
Comments
3 comments