Skip To Content

Configure roles and privileges

What you can do with ArcGIS Enterprise depends on the user type, role, and privileges assigned to your account.

There are three common roles that ArcGIS Enterprise administrators can give to the people responsible for managing and creating content with Sites. These roles are: Administrator, Site Manager, and Core Team Member.


All roles to create and manage content with Enterprise require the Creator user type. A user type determines what default roles can be assigned to a particular member. Roles are comprised of privileges. For more information, see User types, roles, and privileges.

Sites administrator

A sites administrator is simply the default Administrator role that is part of any ArcGIS Enterprise organization, or a custom role with the privileges outlined in the “Quick Actions” section. A sites administrator has full administrative access to the ArcGIS Enterprise Portal used by staff to create and manage content with Enterprise Sites. Privileges include the ability to invite new members, assign member roles, create all types of content, including sites, core teams, and apps, and delete accounts and content.

Quick actions

The default role of Administrator is assigned to someone during installation of the ArcGIS Enterprise portal. This portal administrator can assign the default Administrator role to additional members or they can create a custom role based on the Publisher role with select administrative privileges, such as view all members, invite new users, create categories, change member roles, and manage security access for configuring enterprise logins. For more information on administrative privileges, see Administrator under Default roles.

Site manager

To create sites and manage core teams, a person needs a custom role with some administrative privileges. With this custom role, a member can create a site and its core team (an update group). They can also automatically add new members without needing to send them an invitation.

Quick actions

Ensure that the person is added to the team Publisher role and add the administrative privileges to Create groups with update capabilities and Assign members.

Core team member

A core team member is someone who has been added to a core team. Core team members can edit content shared with the core team group by other members, but they can only add and remove their own content from this group.

Quick actions

Assign a default Publisher role to an internal staff account if that person is to be added to a core team. See How teams work for more information on adding people to a core team.

Who can assign roles and create custom roles?

A default administrator can configure roles and privileges for members of the ArcGIS Enterprise. Members who have a custom Administrator role that includes the View all (Members), Change roles (Members), and Member roles (Organization Settings) privileges can also assign roles and privileges. This includes assigning privileges to custom roles.

Assign a default role

To assign a default role to a member of the ArcGIS Enterprise, ensure that you have the appropriate administrative privileges.

  1. Sign in to the ArcGIS Enterprise.
  2. On the Overview page, click the More actions button next to the New menu.
  3. Click Go to ArcGIS Enterprise and follow the steps under Change member roles.

    If you don't see the person you're looking for, they may not be a member of the organization yet. Follow steps provided in Invite and add members to add the person to the ArcGIS Enterprise.

  4. Ask the member to sign in to their account to confirm their new role.

Configure a custom role

To configure a custom role, ensure that you have the appropriate administrative privileges.

  1. Sign in to ArcGIS Enterprise.
  2. On the Overview page, select the More actions button next to the New menu.
  3. Select Go to ArcGIS Enterprise and follow the steps under Configure member roles.
  4. Provide a name and description for the role.

    A sample role name and description may be Site manager with the description this role can create and edit sites and core teams.

  5. Once you've created this custom role, you can assign it to people in your organization.