ArcGIS Online Administration Associate key terms

The top-level ArcGIS Online account that holds all members, content, settings, and credits for an institution. Administrators configure it centrally, and every item and user belongs to exactly one organization.

A built-in member role that grants full control over organization settings, members, groups, and content. Default administrators can do everything, while custom roles can be limited to specific privileges.

A member role created by an administrator that grants a chosen subset of privileges, such as publishing or sharing, instead of the full default role. It lets organizations apply least privilege to different staff.

A single permission, such as creating groups or editing features, that can be switched on or off for a role. Privileges are the building blocks that determine what a member can do.

The assigned permission set for a user account, such as Viewer, User, Publisher, or Administrator. A member's role determines which tools and content types they can access.

An email or link an administrator sends so a person can join the organization and create an account. Invitations can carry a default role and group membership and may expire.

An entitlement assigned to a member that unlocks a product or capability, such as ArcGIS Pro, a field app, or an extension. Administrators assign and reclaim licenses as staffing changes.

A supplementary license for a specific extension or app, such as an analyst extension or a field data collection app, assigned on top of a base user type. It is tracked separately from core member access.

The base level of access assigned to a member, such as a full creator type or a lighter viewer type, which sets the overall ceiling of what that account can do. Licenses and roles layer on top of it.

The consumption unit ArcGIS Online uses to meter paid operations, such as geocoding, spatial analysis, and storage. Administrators monitor credit use and can allocate budgets to control spending.

A spending limit set for the organization or for individual members and groups so credit consumption cannot exceed a defined amount. Budgets help prevent surprise overages and enforce cost control.

A hosted ArcGIS service, such as geocoding or network analysis, that consumes credits each time it is used. Administrators can restrict which members may call these services.

The maximum amount of hosted data, including feature layers and file items, that an organization or member may store. Exceeding it blocks new uploads until space is freed or the quota is raised.

The central configuration pages where administrators control security, sharing defaults, member permissions, credits, and appearance. Changes here apply organization-wide and should be reviewed before saving.

Organization options that govern authentication and access, including allowed sign-in methods, multi-factor authentication, and IP or referrer restrictions. They protect accounts and content from unauthorized use.

A sign-in requirement that combines a password with a second proof, such as a code from an authenticator app. Administrators can enable and enforce it for all members to reduce account compromise.

An open standard used to federate sign-in so members authenticate through an external identity provider rather than a separate ArcGIS password. Administrators configure the trust between the provider and the organization.

A sign-in configuration that lets members use corporate credentials through an identity provider, often with SAML or OpenID Connect. It centralizes account lifecycle management in the organization's directory.

A collection of members and items used to share content with a defined audience. Groups can be open to the organization, private, or invitation-only, and administrators can manage their ownership.

The member account responsible for administering a group, including its membership and shared items. Administrators can reassign ownership when a staff member leaves or changes roles.

The audience setting on an item or group, such as private, shared with a group, shared with the organization, or public. Administrators set default sharing behavior and can restrict public sharing.

Making an item visible to anyone on the internet without signing in. Administrators can disable this capability organization-wide or limit it to trusted members and approved content.

The administrative practice of reviewing, organizing, transferring, and removing items and groups in the organization. It includes reassigning ownership and cleaning up unused or duplicate content.

The member account that controls an item and its sharing. When an employee departs, administrators should transfer ownership so content is not lost or orphaned.

A feature layer whose data is stored and served by ArcGIS Online rather than an external database. It supports editing, analysis, and sharing and counts against organization storage.

Server-side geoprocessing, such as buffering, overlay, or hot spot detection, run on hosted data through ArcGIS Online. Many tools consume credits, so administrators monitor usage.

An administrative view summarizing organization health, including credit usage, storage, member counts, and service availability. It helps administrators spot trends and act before limits are hit.

A record of member and administrative activity, such as sign-ins, sharing changes, and content deletions. Administrators use it for troubleshooting, compliance, and investigating incidents.

A user account that belongs to the organization and holds a role, user type, and licenses. Administrators create, disable, and remove members as staffing changes.

A member account that is blocked from signing in but retained, preserving its content and history. Administrators disable accounts temporarily instead of deleting them when access should pause.

The background map new maps and scenes open with, chosen by administrators from available basemaps. Setting a suitable default gives members a consistent starting point.

The organization's branded landing page, where administrators configure the banner, description, and featured content. It shapes how members and visitors first experience the site.

A credential that lets an application access location services without an interactive user sign-in. Administrators create, scope, and revoke keys to control which services an app may call.

A protocol that lets an app obtain limited access to ArcGIS Online on a user's behalf without sharing the password. Administrators register apps and control which privileges they may request.

The published commitment describing availability and support expectations for the hosted platform. Administrators reference it when planning outages, maintenance, and escalation paths.

A saved copy of organization content or configuration used to restore data after accidental deletion or corruption. Administrators plan regular exports and verify that restores work.

A downloadable summary of activity such as credit consumption, storage, and member sign-ins over a period. Administrators use reports to justify budgets and identify heavy users.

A license configuration that allows a desktop product to check out entitlement for use without a live connection. Administrators manage which members receive and return these licenses.

The act of giving a member a specific role, whether built-in or custom, that defines their permissions. Administrators review assignments periodically to keep access aligned with duties.