Accounts

ArcGIS for Microsoft 365 has account and license requirements. Depending on your user account privileges or role type, different product functionality may be available. The following sections describe the account types, privileges, and limitations in ArcGIS for Microsoft 365.

Microsoft 365 license

Your Microsoft 365 component must be licensed through Microsoft. See Microsoft 365 Licenses for more information.

Note:

ArcGIS Connectors for Power Automate requires explicit Microsoft component licensing.

For many ArcGIS for Power BI functions, your Microsoft 365 role should be set to Contributor or higher.

ArcGIS account

When you use ArcGIS for Microsoft 365, you are prompted to sign in. You can sign in with your ArcGIS organizational account or continue as a guest user. Guest users and ArcGIS account holders have different privileges within ArcGIS for Microsoft 365 and have access to differing levels of content. The following describes some differences between a guest user and a user with an ArcGIS account:

  • Guest user— Most users with a licensed Microsoft 365 component can access ArcGIS for Microsoft 365 without signing in to ArcGIS. Some premium content and functions are unavailable. See the User types, roles, and privileges, ArcGIS Connectors for Power Automate, and ArcGIS for Power BI sections in this topic for more information about the limitations to guest user capabilities.
  • ArcGIS account—To access additional functionality in ArcGIS for Microsoft 365, sign in with your ArcGIS organizational account credentials. The functionality available is based on the ArcGIS user type and role configured by your ArcGIS organization administrator. If you do not have an ArcGIS account, you can sign up for a free trial ArcGIS Online subscription. It is assumed that the authentication method used to access your ArcGIS account has been properly configured by your ArcGIS organization administrator.
Note:

ArcGIS Online Public Account types are not supported.

User types, roles, and privileges

Your ability to perform certain actions in ArcGIS for Microsoft 365 components is affected by the privileges granted to your ArcGIS organizational account. Different user types and roles have varying levels of privileges included by default. See ArcGIS for Power BI and ArcGIS Connectors for Power Automate for a description of the user privileges in those components. The following table shows the default user types and related available actions in ArcGIS for Excel, ArcGIS for SharePoint, and (where applicable) ArcGIS for Teams:

ActionGuest userViewer, Mobile Worker, or Contributor1Creator or Professional

Choose basemaps

Esri default set of four basemaps

Yes

Yes

Plot x,y data on the map

Yes

Yes

Yes

Add data from SharePoint

Yes

Yes

Yes

Add public ArcGIS content

Yes

Yes

Yes

Search locations

Yes

Yes

Yes

Dynamic filtering

Yes

Yes

Yes

Edit locations

Yes

Yes

Yes

Map controls

Yes

Yes

Yes

Measure

Yes

Yes

Yes

Geosearch

Yes

Yes

Yes

Geotag (SharePoint only)

Yes2

Yes

Yes

Add content from your ArcGIS account

Yes

Yes

Print a map

Yes

Yes

Geocoding

Yes

Yes

Configure geotag attributes (SharePoint only)

Yes

Yes

Network (Drive time) analysis

Yes

Yes

Spatial filter (Excel only)

Yes

Buffer analysis

Yes

GeoEnrichment and information cards

Yes

Share a map or layer

Yes

Add attribute table (Excel only)

Yes

Note:

For ArcGIS Enterprise, when a utility service, such as geocoding, is set up from ArcGIS Online, users may need the View content shared with organization privilege to access the service.

For more information about ArcGIS user types, roles, and privileges, refer to the ArcGIS Online documentation and ArcGIS Enterprise documentation.

1—Contributor and Professional user types were previously Editor and GIS Professional.

2—If attributes are configured

ArcGIS Connectors for Power Automate

To use ArcGIS Connectors for Power Automate, your Microsoft 365 account must include a Power Automate license. You must also have an ArcGIS organizational account or an ArcGIS API key; you cannot use ArcGIS Connectors for Power Automate as a guest user. The following table explains the two methods of accessing ArcGIS Connectors for Power Automate:

Access methodInstructions

ArcGIS organizational method

If you are a member of an ArcGIS organization, you can access available actions using the ArcGIS Connectors for Power Automate ArcGIS Online connector, the PaaS connector, or the ArcGIS Enterprise connector.

If you aren't a member of an ArcGIS organization, you can sign up for a free trial ArcGIS Online account.

ArcGIS API key

You need either an Esri Developer account or an ArcGIS Online account with a user type of Creator or higher to access the developer dashboard and manage your API keys. You cannot use an ArcGIS Enterprise account type. For more information, see Known limitations.

To get an ArcGIS API key, follow the steps in the Esri Developer Create and manage an API key tutorial.

To use ArcGIS Connectors for Power Automate with some of the available ArcGIS actions, your system administrator must configure your ArcGIS account with the following privileges:

ActionPrivilege

Geoenrichment

GeoEnrichment

Find address candidate

Geocoding

Geocode addresses

Geocoding

Point to point routing

Network analysis

Create feature layer

Publish hosted feature layers

The user types that include these privileges by default are listed in User types, roles, and privileges. If you do not have access to these privileges, some actions may be limited. If you want these privileges granted, contact your organization administrator.

ArcGIS for Power BI

Microsoft Power BI does not store the results of analysis services, such as geocoding and buffer/drive time, in a hosted feature layer. Guest users who do not sign in to an ArcGIS account can use ArcGIS for Power BI, with some limitations. The following table compares guest user and ArcGIS account holder functionality and limitations:

FunctionalityGuest userArcGIS account

Basemaps

Esri default set of four basemaps

All Esri basemaps

Your organization's basemaps

N/A

Yes

Custom basemaps

No

Yes

Geocoding

Yes

Yes

Number of geocoding locations per map

3,500

10,000

Number of geocoding locations per month

10,000

No monthly limit

Number of polygon boundaries per map

10,000

15,000

Data-enriched reference layers

Some USA demographics

All Esri Demographics

Number of reference layers per map

1

Multiple

Access to public ArcGIS feature layers

Yes

Yes

Access to ArcGIS Living Atlas of the World maps and layers (feature services)

No

Yes

Network (Drive time) analysis

Yes

Yes

Number of buffer areas or drive time analyses per map

5

10

Data-enriched information cards

Yes, some USA demographics

Yes, all Esri Demographics

Number of information cards per map

2

5

Some of the functions listed in the above table require specific privileges, such as geocoding, GeoEnrichment, and Network analysis. See Services and privileges and the ArcGIS user types, roles, and privileges topic in the ArcGIS Online documentation and ArcGIS Enterprise documentation. If your account does not have these privileges, the functionality may be limited or unavailable. If you want these privileges granted, contact your organization administrator.

Note:

To use the content sharing features in ArcGIS for Power BI, your Microsoft 365 account should include a Power BI Pro or Premium plan with capabilities to publish reports. Users without this plan cannot embed or publish reports to the web.

ArcGIS authentication

ArcGIS for Microsoft 365 works directly with an ArcGIS Online organization or an on-premises ArcGIS Enterprise deployment. Signing in to ArcGIS connects your Microsoft product to an ArcGIS organization and enables the full functionality of ArcGIS for Microsoft 365 features.

The authentication method used to sign in is determined by the security features set up by your organization administrator. For more information about ArcGIS authentication and to ensure that security settings are properly implemented, refer to the security documentation for ArcGIS Online or ArcGIS Enterprise.

Authentication methods

You must be an organization administrator to administer ArcGIS authentication.

ArcGIS for Microsoft 365 supports the following authentication methods for connecting to ArcGIS:

  • Built-in accounts—Users provide their ArcGIS Online credentials. This results in the use of token-based authentication using OAuth 2.0.
    Note:

    ArcGIS for Power BI supports built-in authentication methods when using ArcGIS Online or ArcGIS Enterprise and Power BI in an online environment only.

  • OpenID Connect—ArcGIS administrators can configure the ArcGIS Online sign-in page to show the OpenID Connect login. For more information, see the Set up OpenID Connect logins topic in the ArcGIS Online help.
  • Enterprise logins—Enterprise (organizational) logins are supported using Security Assertion Markup Language (SAML) 2.0. For more information about SAML, see the Set up SAML logins topic in the ArcGIS Online help. See Configure enterprise accounts for more information about using enterprise logins with ArcGIS for Microsoft 365.
  • IWA/PKI/LDAP/Smartcard—For more information about ArcGIS Enterprise authentication and IWA/PKI configuration, see the Portal authentication configuration topic in the ArcGIS Enterprise help.