GIS Question of the Day #3 - Group Layers

Question:

In ArcGIS, what are group layers and how do we restrict users/groups to view certain layers only in portal/applications?

Answer:

In ArcGIS, group layers and access restrictions are important tools for organizing and managing map content and user permissions. Here’s an overview of both concepts:

Group Layers

Definition: Group layers are a way to organize multiple layers into a single layer group. This helps manage complex maps with many layers, allowing you to turn multiple layers on or off simultaneously and to apply common settings to all layers within the group.

Features:

• Hierarchical Organization: Group layers can contain other group layers, creating a nested structure.

• Simplified Management: You can manage the visibility, symbology, and other properties of multiple layers more efficiently.

• Shared Properties: Applying symbology or labeling to a group layer affects all the layers within that group.

Usage:

1. Creating Group Layers: In ArcGIS Pro, right-click the map’s “Contents” pane, select “New Group Layer,” and then drag existing layers into the new group layer.

2. Managing Group Layers: You can expand or collapse the group layer to show or hide the individual layers within it. Group layer properties can be adjusted in the same way as individual layers.

Restricting Users/Groups to View Certain Layers in Portal/Applications

To restrict access to specific layers for different users or groups, you can use ArcGIS Online or ArcGIS Enterprise portal’s sharing and permission settings. Here are the steps:

1. Organize Content into Groups:

   • Create groups in your ArcGIS Online or ArcGIS Enterprise portal.

   • Add users to these groups based on their roles or permissions.

2. Share Layers and Maps:

   • Share layers, maps, and other content with specific groups. This can be done through the item's details page under the “Share” options.

   • You can specify if the content is shared with everyone (public), the organization, or specific groups.

3. Setting Permissions:

   • Viewer Role: Assign users to roles such as Viewer, Data Editor, or Administrator, which determine their access level.

   • Item Details: Go to the item details page of the layer or map, and under the “Settings” tab, set the permissions for editing, exporting, and sharing.

   • Service Definition: For feature services, you can further define permissions on who can query, update, delete, or add features.

4. Creating Web Maps and Applications:

   • Configure web maps and applications to use only the layers that the specific group or user should have access to.

   • Use Web AppBuilder, Experience Builder, or other ArcGIS apps to create applications that provide a tailored view of the data.

5. Advanced Security:

   • Attribute Rules and Filters: Apply filters or attribute rules to further control what data is visible to specific users.

   • Proxy Services: Use a proxy service to manage access and enforce additional security measures.

By organizing your layers into group layers and leveraging the sharing and permission settings in ArcGIS Online or ArcGIS Enterprise, you can efficiently manage who sees what content, ensuring that users have access only to the data they need.