A role defines the set of privileges assigned to a member. Privileges are assigned to members through a default role or a custom role. Members are assigned a role when they are invited to the organization.
If you're not sure what role you were assigned or if you need more information about your role, click the Role Information button 
in the Role section of your profile.
Note:
Once a member joins the organization, their role can be changed by administrators and those with privileges to change member roles. Changing a member's role to or from administrator can be done only by administrators.
Default roles
ArcGIS Online defines a set of privileges for the default roles.
Note:
A member's user type determines the default roles that can be assigned to them.
Each default role listed below includes a summary of what it allows users to do and the user types that are compatible with it.
| Default role | Description | Compatible user types |
|---|---|---|
Viewer | View items such as maps, apps, demographics, and elevation analysis layers that have been shared by other ArcGIS users. Those assigned the Viewer role can join groups owned by the organization, as well as use geocoding, geosearch, and network analysis (routing and directions). Members assigned the Viewer role cannot create or share content or perform analysis or data enrichment. | All user types |
Data Editor | Includes the same privileges as the Viewer role plus the ability to edit features shared by other ArcGIS users. | All user types except Viewer |
User | Includes the same privileges as the Data Editor role plus the ability to create groups and content. Users can use the organization's maps, apps, layers, and tools, and join groups that allow members to update all items in the group. Members assigned the User role can also create maps and apps, edit features, add items, share content, and create groups. | Creator, Professional, and Professional Plus |
Publisher | Includes the same privileges as the User role plus the ability to publish features and map tiles as hosted web layers. Members assigned the Publisher role can also perform analysis on layers in maps. | Creator, Professional, and Professional Plus |
Facilitator | Includes the same privileges as the Publisher role plus the ability to invite partnered collaboration members to groups. This includes the privilege to create and manage partnered collaboration groups, invite members from another organization into groups, and create shared update groups. | Creator, Professional, and Professional Plus |
Administrator | Includes the same privileges as the Facilitator role plus privileges to manage the organization and other users. An organization must have at least one administrator, though two are recommended. There is no limit to the number of members who can be assigned the Administrator role that can be assigned in an organization; however, for security reasons, you should only assign this role to those who require the additional privileges associated with it. | Creator, Professional, and Professional Plus |
Tip:
Although the default Viewer and Data Editor roles do not support joining groups owned by outside organizations, a member can be granted the Join external groups privilege through a custom role created based on either of these default roles.
For more information about specific privileges included with each default role, see Privileges granted to roles.
Custom roles
If you need more fine-grained control of the privileges granted to members, create custom roles. For example, to assign some members the same privileges as a default Publisher but without allowing them to use the ArcGIS GeoEnrichment Service, do the following:
- Create a custom role based on the default Publisher role but disable the GeoEnrichment privilege.
- Name the custom role to reflect the privileges it confers; for example, name it Publisher_without_GeoEnrichment or something similar.
Only members of the default administrator role, or those assigned a custom administrator role with the Member roles privilege, can create and modify custom roles. These administrators can configure custom roles based on any combination of available general and administrative privileges.
Administrators can use one of the available predefined templates containing privileges for common workflows, such as curating data or authoring content. The templates can be used as configured or can be customized as needed by adding or removing privileges. Once a custom role has been created, any organization member who has the Change roles privilege can assign the role to members.
When you create a custom role, privileges that are dependent on one another are enabled by default. For example, to publish a hosted feature layer, role members must also have the privilege to create, update, and delete content. If you disable either of those privileges, members of the role cannot publish a hosted feature layer. See Privileges for common workflows for a list of dependent privileges required for members to complete specific tasks.
You can create custom roles that include administrative privileges to manage your organization settings. This allows administrators to delegate a specific set of administrative tasks to users without giving them the full set of privileges in the default administrator role. For example, a user with a custom role that includes the Organization website privilege can manage the organization's website settings without the ability to perform other administrative tasks, such as managing security or credits.
The privileges granted to a member through a custom role cannot exceed those associated with the member's assigned user type. For example, a member with a Viewer user type cannot be assigned a role with editing privileges.
Tip:
If you are a member of a custom role, you can get information about the privileges it includes by clicking the Role Information button in your profile.