Add members to your portal—ArcGIS Enterprise on Kubernetes

If the portal has been configured to access your organization's Windows Active Directory (AD), LDAP, or SAML groups, organization-specific accounts can be added in bulk based on their Active Directory, LDAP, or SAML group membership.

You can add built-in accounts individually or in bulk using the portal.

If you're using the portal's built-in store to manage members, the member's account is added to the built-in identity store and appears in the portal. The account information is stored in the portal.

If you're using organization-specific logins or identity store to manage members, the account information is read from the organization-specific identity provider and appears as an entry in the portal. The account authentication information is not stored in the portal.

To learn more about how members are managed in the portal, see Manage access to your portal. For full instructions on how to add members to your portal, see the steps in the sections below.

Allow users to add their own accounts

Organization-specific accounts

If your portal is configured with an organization-specific identity store, you can configure the portal to register these accounts with it the first time the organization-specific accounts connect to it. By default, new installations of portal do not allow accounts from an organization-specific identity store to be registered to the portal automatically. For full instructions on how to configure your portal to allow this, see Automatic registration of organization-specific accounts.

Add accounts using the portal

Using the portal, you can add built-in or organization-specific accounts to the organization. Accounts can be added individually or in bulk using a comma-separated values (CSV) file. If the portal has been configured to access your organization's Active Directory, LDAP, or SAML groups, organization-specific accounts can be added from Active Directory, LDAP, or SAML groups in your organization.

Add built-in members

You can add built-in members one at a time or in bulk from a file.

One at a time

Verify that you are signed in as an Administrator of your organization.
Click Organization > Members > Add Members.
On the Add Members page, under Method, select the Add built-in portal members option and click Next.
Click the New member tab and provide the following information:
- First name—The user's first name (for example, Jon).
- Last name—The user's last name (for example, Cho).
- Email address—An email address for the user, for example, jcho@email.com. If an email address is not available, use the email address of the Administrator. The email address cannot contain an apostrophe.
- Username—The username alias for the account. The username is populated automatically based on the email address. You can modify it as desired (for example, jcho11). The username must be between 6 and 128 ASCII characters. Some areas of ArcGIS Enterprise require that you enter a case sensitive username. You must inform the user of their username.
- User type—The user type to which the user will be assigned. Select any available user type from the drop-down list. You can click the compatible roles and compatible add-on licenses count to find out more about what is compatible with the selected user type. For more information, see User types.
- Role—The role to which the member will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role) that is compatible with the selected user type.
- Password—A password for the account (for example, jcho.1234). The password must be at least eight characters and have at least one number and letter. You must inform the user of their password. It's recommended that you encourage the user to change their password after signing in for the first time.
Click Next to complete adding this user, or Next, add another to add more users.
On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
On the Set member properties page, you can assign add-on licenses, groups, and settings to the selected members.
1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)
  If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.
2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
3. In the Member categories section, if your organization has set up member categories and you want to assign member categories to the new members, click Assign categories. Select up to 20 categories to assign and click Save.
  You only see this option if the organization has configured member categories and you have the administrative privilege to update member information.
4. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
Click Next.
Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the portal. The users can now sign in using the credentials you specified.

From a file

Create a plain-text CSV file that contains information for each member account. The first line must contain header information with these field names: Email, Role, User Type, First Name, Last Name, Username, and Password. Subsequent lines include the actual member account information as follows:
Tip:
To download a UTF-8 encoded CSV file with the required fields prepopulated in your specified language, click Download CSV template on the Add members from a file page (step 6 below).
- First Name—The user's first name (for example, Jon).
- Last Name—The user's last name (for example, Cho).
- Email—An email address for the user, for example, jcho@email.com. If an email address is not available, use the email address of the Administrator. The email address cannot contain an apostrophe.
- Username—The username alias for the account. The username is populated automatically based on the email address. You can modify it as desired (for example, jcho11). The username must be between 6 and 128 ASCII characters. Some areas of ArcGIS Enterprise require that you enter a case sensitive username. You must inform the user of their username.
- Password—A password for the account (for example, jcho.1234). The password must be at least eight characters and have at least one number and letter. You must inform the user of their password. It's recommended that you encourage the user to change their password after signing in for the first time.
- Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
- User Type—The user type to which the user will be assigned. This can include any user type available to your organization. For more information, see User types.
The format for the file is as follows:
```
Email,Role,User Type,First Name,Last Name,Username,Password
jcho11@email.com,publisher,Creator,Jon,Cho,jcho11,jcho.1234
srajhandas@email.com,viewer,Viewer,Satish,Rajhandas,srajhandas,sraj.abcd1
```
Save the document as a plain-text CSV file and close it.
Verify that you are signed in as an Administrator of your organization.
Click Organization > Members > Add Members.
On the Add Members page, under Method, select the Add built-in portal members option and click Next.
Click the New members from a file tab and click Browse to select the CSV file. Click Open.
The file is checked for field errors. If errors are found, click Edit beside the listed error, fix the error, and click Save. To remove a member with invalid properties, check the box beside the member name and click Remove. Alternatively, you can fix the errors directly in your file and click Choose a different file to select the updated file.
On the Compile member list page, review the list of members that will be added to the organization and remove members from the list if needed. Click Next.
On the Set member properties page, you can assign add-on licenses, groups, and settings to the selected members.
1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)
  If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.
2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
3. In the Member categories section, if your organization has set up member categories and you want to assign member categories to the new members, click Assign categories. Select up to 20 categories to assign and click Save.
  You only see this option if the organization has configured member categories and you have the administrative privilege to update member information.
4. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the portal. The users can now sign in using the credentials you specified.

Add members using their organization-specific logins

You can add members directly to the organization by creating ArcGIS accounts that the member can access using an organization-specific login. This option is only available if your organization has configured SAML logins or OpenID Connect logins. You can add members one at a time or in bulk using a CSV file.

One at a time

Verify that you are signed in as an administrator of your organization.
Click Organization > Members > Add Members.
Select the Add members for organization-specific logins option and click Next.
Click the New member tab and provide the following information:
- First name—The user's first name (for example, Jon).
- Last name—The user's last name (for example, Cho).
- Email address—Email address for the user, for example, jcho@email.com. If an email address is not available, use the email address of the Administrator. The email address cannot contain an apostrophe.
- Identity type—If your organization has both SAML and OpenID Connect configured, select the Identity type option you want to use.
- Username—The username for the account. The username must match the existing SAML or OpenID Connect ID. If it doesn't match, the account will be created but cannot be used. Verify that the SAML or OpenID Connect ID is correct before proceeding.
  Note:
  For SAML logins, the ID value must match the value configured by the identity provider (IdP) for the NameID attribute.
  For OpenID Connect logins, the ID value must match the value of the subject identifier (sub) attribute sent in the ID token from the OpenID Connect provider (for example, the Google ID Token from Google) to ArcGIS. The subject identifier uniquely identifies each user. For example, the sub value may be 10769150350006150715113082367 for Google user jsmith or auth0|123456 for Auth0 user Jane Doe.
- User type—The user type to which the user will be assigned. Select any available user type from the drop-down list. You can click the compatible roles and compatible add-on licenses count to find out more about what is compatible with the selected user type. For more information, see User types.
- Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
Click Next to complete adding this user, or Next, add another to add more users.
On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)
  If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.
2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
3. In the Member categories section, if your organization has set up member categories and you want to assign member categories to the new members, click Assign categories. Select up to 20 categories to assign and click Save.
  You only see this option if the organization has configured member categories and you have the administrative privilege to update member information.
4. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the organization. The user can now sign in to the portal.

From a file

Create a plain-text CSV file that contains information for each member account. The first line must contain header information with these field names: Email, Role, User Type, First Name, Last Name, Username, and Identity Type. Subsequent lines include the actual member account information as follows:
Tip:
To download a UTF-8 encoded CSV file with the required fields prepopulated in your specified language, click Download CSV template on the Add members from a file page (step 6 below).
- First Name—The user's first name (for example, Jon).
- Last Name—The user's last name (for example, Cho).
- Email—An email address for the user, for example, jcho@email.com. If an email address is not available, use the email address of the Administrator. The email address cannot contain an apostrophe.
- Username—The username for the account. The username must match the existing SAML or OpenID Connect ID. If it doesn't match, the account will be created but cannot be used. Verify that the SAML or OpenID Connect ID is correct before proceeding.
  Note:
  For SAML logins, the ID value must match the value configured by the identity provider (IdP) for the NameID attribute.
  For OpenID Connect logins, the ID value must match the value of the subject identifier (sub) attribute sent in the ID token from the OpenID Connect provider (for example, the Google ID Token from Google) to ArcGIS. The subject identifier uniquely identifies each user. For example, the sub value may be 10769150350006150715113082367 for Google user jsmith or auth0|123456 for Auth0 user Jane Doe.
- Identity type—This information is only required if your organization has both SAML and OpenID Connect configured.
- Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
- User Type—The user type to which the user will be assigned. This can include any user type available to your organization. For more information, see User types.
If your organization has both SAML and OpenID Connect configured, the format for the file is as follows:
```
Email,Role,User Type,First Name,Last Name,Username,Identity Type
jcho@email.com,publisher,GIS Professional Advanced,Jon,Cho,jcho11,SAML
srajhandas@email.com,viewer,Viewer,Satish,Rajhandas,srajhandas,SAML
```
If your organization has only SAML or OpenID Connect configured, the format for the file is as follows:
```
Email,Role,User Type,First Name,Last Name,Username
jcho@email.com,publisher,GIS Professional Advanced,Jon,Cho,jcho11
srajhandas@email.com,viewer,Viewer,Satish,Rajhandas,srajhandas
```
Save the document as a plain-text CSV file and close it.
Verify that you are signed in as an administrator of your organization.
Click Organization > Members > Add Members.
Select the Add members for organization-specific logins option and click Next.
Click the New members from a file tab and click Browse to select the CSV file. Click Open.
The file is checked for field errors. If errors are found, click Edit beside the listed error, fix the error, and click Save. To remove a member with invalid properties, check the box beside the member name and click Remove. Alternatively, you can fix the errors directly in your file and click Choose a different file to select the updated file.
On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)
  If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.
2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
3. In the Member categories section, if your organization has set up member categories and you want to assign member categories to the new members, click Assign categories. Select up to 20 categories to assign and click Save.
  You only see this option if the organization has configured member categories and you have the administrative privilege to update member information.
4. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the organization. The users can now sign in to the portal.

Add members from AD or LDAP identity providers

If your portal has been configured with an organization-specific identity provider based on Active Directory (AD) or Lightweight Directory Access Protocol (LDAP), organization-specific accounts can be added individually, in bulk, or from AD or LDAP groups managed by the identity provider.

Note:

Accounts must include an email address to be added to the portal. Any special characters in account names will be changed to an underscore (_), except the at sign (@), point (.), or dash (-).

One at a time

Verify that you are signed in as an administrator of your organization.
Click Organization > Members > Add Members.
On the Add members page, select the Add members based on existing Active Directory or LDAP users option and click Next.
Click the New member tab and provide the following information:
- Username—The username alias for the account. The username must match the existing Active Directory or LDAP user and format defined in the identity provider (for example, jcho11). Click the magnifying glass to search for and select the desired username.
- Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
- User Type—The user type to which the user will be assigned. Select any available user type from the drop-down list. You can click the compatible roles and compatible add-on licenses count to find out more about what is compatible with the selected user type. For more information, see User types.
Click Next to complete adding this user, or Next, add another to add more users.
On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)
  If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.
2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
3. In the Member categories section, if your organization has set up member categories and you want to assign member categories to the new members, click Assign categories. Select up to 20 categories to assign and click Save.
  You only see this option if the organization has configured member categories and you have the administrative privilege to update member information.
4. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
Verify that the member account information is correct and click Add Members.

The member account is added to the organization. The user can now sign in to the portal.

From a file

Create a plain-text CSV file that contains information for each member account. The first line must contain header information with these field names: Username, Role, and User Type. Subsequent lines include the actual member account information as follows:
Tip:
To download a UTF-8 encoded CSV file with the required fields prepopulated in your specified language, click Download CSV template on the Add members from a file page (step 6 below).
- Username—The username alias for the account. The username must match the existing Active Directory or LDAP user and format defined in the organization-specific identity provider (for example, jcho11).
- Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
- User Type—The user type to which the user will be assigned. This can include any user type available to your organization. For more information, see User types.
The format for the file is as follows:
```
Username,Role,User Type
jcho11,publisher,Editor
srajhandas,viewer,Viewer
```
Save the document as a plain-text CSV file and close it.
Verify that you are signed in as an Administrator of your organization.
Click Organization > Members > Add Members.
Select the Add members based on existing Active Directory or LDAP users option and click Next.
Click the New members from a file tab and click Browse to select the CSV file. Click Open.
The file is checked for field errors. If errors are found, click Edit beside the listed error, fix the error, and click Save. To remove a member with invalid properties, check the box beside the member name and click Remove. Alternatively, you can fix the errors directly in your file and click Choose a different file to select the updated file.
On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)
  If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.
2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
3. In the Member categories section, if your organization has set up member categories and you want to assign member categories to the new members, click Assign categories. Select up to 20 categories to assign and click Save.
  You only see this option if the organization has configured member categories and you have the administrative privilege to update member information.
4. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the organization. The users can now sign in to the portal.

From a group

If your portal has been configured with AD or LDAP-based groups, you can add accounts from the AD or LDAP groups you've connected to your portal. See Create groups for more information.

Verify that you are signed in as an Administrator of your organization.
Click Organization > Members > Add Members.
Select the Add members based on existing Active Directory or LDAP users option and click Next.
Click the From a group tab and provide the following information:
- Active Directory or LDAP Group—The Active Directory or LDAP group name. Click the magnifying glass to search for and select the desired Active Directory or LDAP group.
- Role—The role to which the selected accounts will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
- User Type—The user type to which the member will be assigned. For more information, see User types.
On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)
  If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.
2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
3. In the Member categories section, if your organization has set up member categories and you want to assign member categories to the new members, click Assign categories. Select up to 20 categories to assign and click Save.
  You only see this option if the organization has configured member categories and you have the administrative privilege to update member information.
4. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)

If your group is from an LDAP server, members of nested groups are not added to the portal.

Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the organization. The users can now sign in to the portal.

Feedback on this topic?

Allow users to add their own accounts

Organization-specific accounts

Add accounts using the portal

Add built-in members

One at a time

From a file

Tip:

Add members using their organization-specific logins

One at a time

Note:

From a file

Tip:

Note:

Add members from AD or LDAP identity providers

Note:

One at a time

From a file

Tip:

From a group

In this topic