ArcGIS for Microsoft 365 has account and license requirements. Depending on your user account privileges or role type, different product functionality may be available. The following sections describe the account types, privileges, and limitations in ArcGIS for Microsoft 365.
Microsoft 365 license
Your Microsoft 365 component must be licensed through Microsoft. See Microsoft 365 Licenses for more information.
Note:
ArcGIS Connectors for Power Automate requires explicit Microsoft component licensing.
For many ArcGIS for Power BI functions, your Microsoft 365 role should be set to Contributor or higher.
ArcGIS account
When you use ArcGIS for Microsoft 365, you are prompted to sign in. You can sign in with your ArcGIS organizational account or continue as a guest user. Guest users and ArcGIS account holders have different privileges within ArcGIS for Microsoft 365 and have access to differing levels of content and capabilities. The following describes some of these differences:
- Guest user—Most users with a licensed Microsoft 365 component can access ArcGIS for Microsoft 365 without signing in to ArcGIS. Some premium content and functions are unavailable. See the User types, roles, and privileges, ArcGIS Connectors for Power Automate, and ArcGIS for Power BI sections in this topic for more information about the limitations to guest user capabilities.
- ArcGIS account—To access additional functionality in ArcGIS for Microsoft 365, sign in with your ArcGIS organizational account credentials. The functionality available is based on the ArcGIS user type and role configured by your ArcGIS organization administrator. If you do not have an ArcGIS account, you can sign up for a free trial ArcGIS Online subscription. It is assumed that the authentication method used to access your ArcGIS account has been properly configured by your ArcGIS organization administrator.
Note:
ArcGIS Online Public Account types are not supported.
Note:
See Organizational settings for ArcGIS organization administrator workflows.User types, roles, and privileges
Your ability to perform certain actions in ArcGIS for Microsoft 365 components is affected by the privileges granted to your ArcGIS organizational account. Different user types and roles have varying levels of privileges included by default. See ArcGIS for Power BI and ArcGIS Connectors for Power Automate for a description of the user privileges in those components. The following table shows the default user types and related available actions in ArcGIS for Excel, ArcGIS for SharePoint, and (where applicable) ArcGIS for Teams:
| Action | Guest user | Viewer, Mobile Worker, or Contributor 1 | Creator or Professional |
|---|---|---|---|
Choose basemaps | Esri default set of four basemaps |
|
|
Plot x,y data on the map |
|
|
|
Add data from SharePoint |
|
|
|
Add public ArcGIS content |
|
|
|
Search locations |
|
|
|
Dynamic filtering |
|
|
|
Edit locations |
|
|
|
Map controls |
|
|
|
Measure |
|
|
|
Geosearch |
|
|
|
Geotag (SharePoint only) |
|
|
|
Add content from your ArcGIS account |
|
| |
Print a map |
|
| |
Geocoding |
|
| |
Configure geotag attributes (SharePoint only) |
|
| |
Network (Drive time) analysis |
|
| |
Spatial filter (Excel only) |
| ||
Buffer analysis |
| ||
GeoEnrichment and information cards |
| ||
Share a map or layer |
| ||
Add attribute table (Excel only) |
|
Note:
For ArcGIS Enterprise, when a utility service, such as geocoding, is set up from ArcGIS Online, users may need the View content shared with organization privilege to access the service.
For more information about ArcGIS user types, roles, and privileges, refer to the ArcGIS Online documentation and ArcGIS Enterprise documentation.
1—Contributor and Professional user types were previously Editor and GIS Professional.
2—If attributes are configured
ArcGIS Connectors for Power Automate
To use ArcGIS Connectors for Power Automate, your Microsoft 365 account must include a Power Automate license. You must also have an ArcGIS organizational account or an ArcGIS API key; you cannot use ArcGIS Connectors for Power Automate as a guest user. The following table explains the two methods of accessing ArcGIS Connectors for Power Automate:
| Access method | Instructions |
|---|---|
ArcGIS organizational method | If you are a member of an ArcGIS organization, you can access available actions using the ArcGIS Connectors for Power Automate ArcGIS Online connector, the PaaS connector, or the ArcGIS Enterprise connector. If you aren't a member of an ArcGIS organization, you can sign up for a free trial ArcGIS Online account. |
ArcGIS API key | You need either an Esri Developer account or an ArcGIS Online account with a user type of Creator or higher to access the developer dashboard and manage your API keys. You cannot use an ArcGIS Enterprise account type. For more information, see Known limitations. To get an ArcGIS API key, follow the steps in the Esri Developer Create and manage an API key tutorial. |
To use ArcGIS Connectors for Power Automate with some of the available ArcGIS actions, your system administrator must configure your ArcGIS account with the following privileges:
| Action | Privilege |
|---|---|
GeoEnrichment | |
Geocoding | |
Geocoding | |
Network analysis | |
Publish hosted feature layers |
The user types that include these privileges by default are listed in User types, roles, and privileges. If you do not have access to these privileges, some actions may be limited. If you want these privileges granted, contact your organization administrator.
ArcGIS for Power BI
Microsoft Power BI does not store the results of analysis services, such as geocoding and buffer/drive time, in a hosted feature layer. Guest users who do not sign in to an ArcGIS account can use ArcGIS for Power BI, with some limitations. The following table compares guest user and ArcGIS account holder functionality and limitations:
| Functionality | Guest user | ArcGIS account |
|---|---|---|
Basemaps | Esri default set of four basemaps | All Esri basemaps |
Your organization's basemaps | N/A | Yes |
Custom basemaps | No | Yes |
Geocoding | Yes | Yes |
Number of geocoding locations per map | 3,500 | 10,000 |
Number of geocoding locations per month | 10,000 | No monthly limit |
Number of polygon boundaries per map | 10,000 | 15,000 |
Data-enriched ArcGIS layers | Some USA demographics | All ArcGIS content included with your account |
Number of ArcGIS layers per map | 1 | Multiple |
Access to public ArcGIS feature layers | Yes | Yes |
Access to ArcGIS Living Atlas of the World maps and layers (feature services) | No | Yes |
Network (Drive time) analysis | Yes | Yes |
Number of buffer areas or drive time analyses per map | 5 | 10 |
Data-enriched information cards | Yes, some USA demographics | Yes, all ArcGIS content included with your account |
Number of information cards per map | 2 | 5 |
Some of the functions listed in the above table require specific privileges, such as geocoding, GeoEnrichment, and Network analysis. See Services and privileges and the ArcGIS user types, roles, and privileges topic in the ArcGIS Online documentation and ArcGIS Enterprise documentation. If your account does not have these privileges, the functionality may be limited or unavailable. If you want these privileges granted, contact your organization administrator.
Note:
To use the content sharing features in ArcGIS for Power BI, your Microsoft 365 account should include a Power BI Pro or Premium plan with capabilities to publish reports. Users without this plan cannot embed or publish reports to the web.
ArcGIS authentication
ArcGIS for Microsoft 365 works directly with an ArcGIS Online organization or an on-premises ArcGIS Enterprise deployment. Signing in to ArcGIS connects your Microsoft product to an ArcGIS organization and enables the full functionality of ArcGIS for Microsoft 365 features.
The authentication method used to sign in is determined by the security features set up by your organization administrator. For more information about ArcGIS authentication and to ensure that security settings are properly implemented, refer to the security documentation for ArcGIS Online or ArcGIS Enterprise.
Authentication methods
You must be an organization administrator to administer ArcGIS authentication.
ArcGIS for Microsoft 365 supports the following authentication methods for connecting to ArcGIS:
- Built-in accounts—Users provide their ArcGIS Online credentials. This results in the use of token-based authentication using OAuth 2.0.
Note:
ArcGIS for Power BI supports built-in authentication methods when using ArcGIS Online or ArcGIS Enterprise and Power BI in an online environment only.
- OpenID Connect—ArcGIS administrators can configure the ArcGIS Online sign-in page to show the OpenID Connect login. For more information, see the Set up OpenID Connect logins topic in the ArcGIS Online help.
- Enterprise logins—Enterprise (organizational) logins are supported using Security Assertion Markup Language (SAML) 2.0. For more information about SAML, see the Set up SAML logins topic in the ArcGIS Online help. See Configure enterprise accounts for more information about using enterprise logins with ArcGIS for Microsoft 365.
- IWA/PKI/LDAP/Smartcard—For more information about ArcGIS Enterprise authentication and IWA/PKI configuration, see the Portal authentication configuration topic in the ArcGIS Enterprise help.