TRAINING GUIDE

ArcGIS Enterprise
Administration Part 1
ArcGIS Enterprise Administration - Part 1
Here at Lucity, we understand that our software is requiring more skills in ESRI technology and
these Esri systems can be difficult to manage without training. In this workshop, we will
explore the nature of ArcGIS Enterprise v10.6.1, touch on key principles and techniques, as
well as explore best practices for integration into Lucity. We will cover some key
administration best practices for: design, setup, maintenance, and optional editing workflow.
Even though we won’t be covering the full gamut of ESRI technologies, we will be focused on
the administration of ArcGIS Enterprise, how this relates to the IT and GIS administrators and
what are some basic principles for enabling ArcGIS Enterprise to be compatible with Lucity.

Table of Contents

Setup .............................................................................................................. 2
ArcGIS Server Design ......................................................................................... 2
ArcGIS Server Setup .......................................................................................... 4
Connect to ArcGIS Server from ArcCatalog .............................................................. 9
ArcGIS Enterprise Updates ............................................................................. 11
Installing and Configuring ArcGIS Server Web Adaptor .............................................. 12
SQL Server Specifications ................................................................................. 16
SQL Instance Setup ......................................................................................... 16
SQL Server Setup Recommendations ................................................................. 16
SQL Server Management Studio ....................................................................... 17
Install ODBC drivers ..................................................................................... 19
Create Enterprise Geodatabase (formerly ArcSDE) ................................................... 20
Registering the Geodatabase in ArcGIS Server ..................................................... 22
Publishing and Configuring Map Services ............................................................... 26
Unlock Schema ........................................................................................... 30
Enabling the Geometry Service .......................................................................... 33
Enabling the Printing Tools (Geoprocessing Service) ................................................. 34
Creating a Geocoding Service ............................................................................ 35
Securing a GIS Service ..................................................................................... 37
How to Create a Feature Service ........................................................................ 44
Redlining .................................................................................................. 44
Publishing a Feature Service ........................................................................... 51
Publishing an Offline Feature Service ................................................................ 55
Setup
ArcGIS Server Design
• ArcGIS Server 10.2.2 and higher are supported for Lucity; however, some functionality
won’t be available prior to ArcGIS 10.4.1.
• Support Windows Server 2008 R2 sp1 or higher
• For Virtualization, recommend Windows Server 2012 R2 or higher
• Server should have 2 cores minimum and 4GB of RAM per core. For a 4-core system, you
should have at least 16GB of RAM.
• SQL Server 2012 sp3, 2014, 2016 and 2017 are supported
• If using ODBC drivers for SQL Server 2016 and higher, use ODBC Driver v17. Otherwise, use
ODBC Driver v11.
• If you have virtual servers, make sure you dedicate resources and have the latest VMware
or Hyper-V software available. Based on ESRI’s testing, Virtual software is the key to many
performance issues. Make sure in VMware environments that you subtract overhead of two
cores for the Virtual Environment so ArcGIS Server map services doesn’t pool across the
Virtual overhead cores. If you don’t, you will see a significant performance decrease in
ArcGIS Server.
• Try to limit map services to utilize 4 pools per core maximum. Anything more than that,
you could allow ArcGIS Server crashes when many people are simultaneously hitting your
server.
• If you have a dedicated system for ArcGIS Server, try creating a RAID 1 SSD configuration
for your hard drives. Also, use the latest version of SSD standards as this will increase
performance and reliability. For all new SSD cards, it will take at least 40 years before
they reach their read/write maximum. This benchmark test was performed on a 24/7
continuous read/write routine. If SAS drives, use RAID 10 with a good RAID controller.
However, SSD is now the current standard of the industry.
• Space depends on caching. If you plan to cache imagery, please account for large image
files. Remember, each scale in the cache will have separate tiles for each scale. If you
have 9 scales within a cache, you will have nine separate tiles of cache. Smaller scale
images will be smaller in size and the larger scale images will be larger in size.
• 10.6.1 installation automatically configures HTTP and HTTPS Secure Design for new
installations. Upgrades stay the same as previous versions.
• For Lucity, we use ArcGIS Tokens for authentication mode. Do not use Web Tier
Authentication as Lucity doesn’t support it.
Lucity Web, Lucity Services, Lucity Mobile Server servers and mobile devices need access to
the map service rest endpoints to function.

2
ArcGIS Enterprise Administration - Part 1
 3
ArcGIS Enterprise Administration - Part 1
ArcGIS Server Setup
1. Download the ArcGIS Server program. You may also want to download the ArcGIS
Server Web Adaptor for IIS as well. The web adaptor can be placed on internal and
external web servers.
Note: When installing ArcGIS Server on a separate server than your SQL Server 2012 sp3 or
higher instance, you need the ODBC drivers supplied at MyEsri.

2. Start the install for ArcGIS Server Windows after program extracts
3. Once installation starts click next.
4
ArcGIS Enterprise Administration - Part 1
 4. In the next dialog, click on ‘I Accept’ and click next.
5. In the next dialog, accept the default features and click next.

6. For python, this is needed for geoprocessing and click next.

7. In the ‘Specify ArcGIS Server Account name and password’, create a username and
passwords for ArcGIS. Recommend adding ‘arcgissvc’ as a user within Active Directory
and add this to ArcGIS Server Account information <domain>\<user>.

5
ArcGIS Enterprise Administration - Part 1
 8. In the next screen, you will be given the option to export your configuration; this is
recommended and will be helpful during upgrades. Click next and install.

9. When finished, you will need to activate.

10. When finished activation, you will be prompted to create a new site.

6
ArcGIS Enterprise Administration - Part 1
 11. Click on create a new site and supply the username and password for the site
administrator account. Click next.

7
ArcGIS Enterprise Administration - Part 1
 12. Specify the root server directory and configuration storage. Your server configuration
is stored in the config-store directory and your working directories are stored in
directories (arcgiscache, arcgisjobs, arcgisoutput, arcgissystem). In this example we
will take the defaults.

13. Click next and finish when done.

ArcGIS Server does not need a web client to run. ESRI chose to use Tomcat as the
servlet engine for ArcGIS Server and can be a stand-alone system if used
internally. However, if you want to serve webpages out through IIS, consider
installing a Web Adaptor. ArcGIS Server web adaptor will act as a proxy server
that will pass requests to and from ArcGIS Server. Web Adaptor will also be able
to create an alias URL location for your ArcGIS Server. ArcGIS Server by itself
needs to have port 6080 or 6443 as the rest service endpoint for the URL. For
example: http://<internalservername>:6080/arcgis/rest/services or
https://<internalservername>:6443/arcgis/rest/services is the URL without the
Web Adaptor. When using the Web Adaptor, requests can be masked through an
alias URL designation http://<URLname>/<virtualdirectory>/rest/services. The
Web Adaptor takes care of the requests to and from ArcGIS Server using port 6080
or 6443 and translates it to the user. The Web Adaptor for ArcGIS Server can be
located on ArcGIS Server machine running IIS or on a different server within the
LAN or a DMZ. For internet and intranet based ArcGIS Server services, it’s
recommended to use a DMZ with the firewall open from DMZ web server to the
internal ArcGIS Server on port 6443. The Web Adaptor will be installed on the DMZ
web server. Also, it is highly recommended that the Web Adaptor uses HTTPS as
the protocol within a secure design as well as running ArcGIS Server as HTTPS
and HTTP. By default, new ArcGIS Server 10.6.1 installs http and https protocols
automatically. In ArcGIS Server design section, we have added a diagram of what
this actually looks like.

8
ArcGIS Enterprise Administration - Part 1
Connect to ArcGIS Server from ArcCatalog
1. Open ArcCatalog and go to the TOC. Expand GIS Servers.

2. Click on Add ArcGIS Server and choose Administer GIS Server. As a note, you can add
users to be able to publish gis services without having administrative rights.

9
ArcGIS Enterprise Administration - Part 1
 3. In the general dialog, you need to add the URL and the username and password for
administrating the server. Make sure you use the exact case for your username and
password as ArcGIS Server is now case sensitive. If Web Adaptor is installed, you can
use the Web Adaptor URL to connect to ArcGIS Server if it is setup to accept
management. Because 10.6.1 installs http and https, you may need to accept
certificates when connecting.

4. Click finish.

10
ArcGIS Enterprise Administration - Part 1
ArcGIS Enterprise Updates
It is recommended to keep your enterprise security and service patches up to date.
5. Go to the Start Menu/All Programs/ArcGIS app folder and choose Check for Updates to
check for ArcGIS Server patches. Click on Install All Patches at the bottom right corner
and start.

11
ArcGIS Enterprise Administration - Part 1
Installing and Configuring ArcGIS Server Web Adaptor
1. Download the ArcGIS Web Adaptor (IIS) and install. If IIS is not setup with features,
ArcGIS Server Web Adaptor will configure IIS for you with the features necessary to run
the Web Adaptor.

2. Start the installation of the web adapter. If IIS is not configured, the installation will
enable the features for you. Click I agree and watch the magic happen.

12
ArcGIS Enterprise Administration - Part 1
 3. After features have been enabled in IIS, you may want to add a signed ssl certificate.
If so, bind the cert to IIS and recommend enabling only tls 1.2. You can use IISCrypto to
enable only the tls 1.2 function including the ciphers. Once complete, click next to
start the installation process of the web adaptor. Click Next and accept the master
agreement.

4. If asked, choose the port assignment you wish to use.

5. Creating a new virtual directory will allow you to add a name to the URL path. By
default, Esri uses ‘arcgis’. If you want you can change the virtual directory name to be
specific to your organization. In the example below, we’ll choose ‘server’. Click Next
and Install.

13
ArcGIS Enterprise Administration - Part 1
 After install is finished, you will be rerouted to a site that will allow you to configure
your ArcGIS Web Adaptor. Enabling administrative access to your site through the web
adaptor is good for internal use only but discuss this option with your network
engineer before enabling it to make sure the vulnerability is acceptable.

14
ArcGIS Enterprise Administration - Part 1
 6. Once configured, you should see a change in the green section of the web adaptor
page.

15
ArcGIS Enterprise Administration - Part 1
SQL Server Specifications
• Server should have 2-4 cores minimum and 4GB of RAM so that SQL Server can use at least
2GB dedicated for the instance (sql server express can only use up to 1GB RAM per
instance). For a Lucity and an Enterprise Geodatabase SQL Instance configuration, I would
suggest 4 cores minimum with at least 8GB dedicated to SQL Server of RAM. Training,
Development or Test servers can have less; 2 cores with at least 4GB of RAM which 1GB is
dedicated to the SQL Server instance.
• RAID 10 configurations have become a standard RAID best practice. Please don’t use
onboard RAID controllers as they are not performance based.
• M.2 SSDs are now hardware standards in the industry and recommended.
• Don’t load ArcGIS Enterprise on a database server. ArcGIS Server and Portal is a memory
hog and will fight for computer resources.
• Plan for data scalability 5 years out. If you have imagery that consumes 20GB and you
know you will acquire a new image at least once within the 5 years, scale out four times
the consumption rate. Space is cheap and there is no need to be caught in a low memory
situation. Remember, digital imagery space is higher as they have a smaller focal length
per image. If you acquired analog images in the past, digital images can be 2-3 times the
memory size.
• Case study: Pocatello used 70GB 2012 Aerial for storage space. In their 2015 Aerial
delivery, the database grew by 400GB. Higher resolution is becoming cheaper to
purchase.
• If in a virtual environment, make sure you have enough RAM and storage space for your
servers. You could have as much as three to four servers minimum depending on your
system design.

*note: Compare Microsoft SQL Server versions

*note: Editions and supported features of SQL Server 2017

SQL Instance Setup

SQL Server Setup Recommendations
1. For Server Configuration, it is good to enabled mixed mode. This is the case where
you have an administrator and you would like to have SA as an admin user that is
constant. Windows authentication only is bad if the person that administrates ever
leaves and you disable their active directory account by accident. It’s not the end of
the world, but this is an IT assurance issue. For me, it’s better to be safe than sorry.
Store your SA password in a safe location that can be accessed in case of
administrative role changes. Again, vulnerability and stability assurance measures are
the key to a healthy working server environment. Reduce the number of server
admins so you have a single point of entry into the database as an administrator. For
those using AD domain or LDAP, please change the account name to include a domain
user so you can browse the local server when added in a domain. SQL Server Browser,
SQL Server Agent and the database engine is necessary to be network aware if using
backup maintenance plans (database maintenance plans are enabled for SQL Server
Standard, Developer or Enterprise only).

16
ArcGIS Enterprise Administration - Part 1
 2. On the data directories tab, it is good to change the location for easy backup queries
and administration. However, system tables will use the Microsoft default location
within the root directory of the databases. I would not recommend enabling user
instances on the user instance tab as well as filestreaming unless you plan on loading
large documents outside of the Geodatabase as BLOBs.

SQL Server Management Studio

3. Microsoft is now deploying SQL Server Management Studio (SSMS) as a standalone

install. This package supports versions SQL Server 2008 through SQL Server 2017 and is
used to support both on-premise and cloud sql instances. Use this package instead of
the built-in SSMS from the SQL Server installer.
SSMS Download

17
ArcGIS Enterprise Administration - Part 1
 4. When in the properties of the SQL Instance in SSMS, go to the memory tab and click on
maximum server memory. You will want this to be a realistic number as the default
puts an ungodly amount of maximum ram that will far exceed your server limit.
Because we are treating this as a production server, you will want to dedicate
resources to SQL Server. For the operating system, at least give the operating system
512 GB of RAM and for SQL Server adjust appropriately. Below is an example.

5. Tab down to Processors in the TOC, do not check Boost SQL Server Priority for a VM
Host using VMWare or
Hyper-V. DO NOT ENABLE
WINDOWS FIBERS
(lightweight pooling)!
This is for older
technologies and ArcSDE
from v10 and higher uses
XML calls to the SQL
Server database so keep
windows fibers disabled.

18
ArcGIS Enterprise Administration - Part 1
 6. Double the network packet size for the Enterprise Geodatabase connections in the
advanced menu item (from 4096 to 8192). For network traffic and performance, the
Geodatabase network packets need the additional size increase.

Install ODBC drivers

You will need to install the ODBC drivers listed in the previous sections on each workstation
that will connect using ArcMap, ArcGIS Pro or ArcCatalog for the Geodatabase. Make sure the
ODBC drivers are installed on ArcGIS Server as well.

19
ArcGIS Enterprise Administration - Part 1
Create Enterprise Geodatabase (formerly ArcSDE)
1. Choose the database platform you will be connecting to. Since Lucity is SQL Server
friendly, this will demonstrate the sql server platform type.
2. Within SQL Server, an instance is the container or the repository of the databases.
3. Database would be a name given to the database. In SQL Server’s case, you will be
specifying a name of the database. In this example, we will be creating a database
called “vector”.
4. Since I have mixed mode turned on for sql authentication, I chose to use the sa
account. As the sysadmin, I could have created a database using my OSA account;
however, for organizations that have changes, I would recommend creating the
database using the SA as this will tag the database to be owned by sa. For most cases,
a mixed mode sql instance is the best practice. This gives your organization the
flexibility of using both the sa account and OSA when managing databases. If a DBA is
let go and they have created databases using their credentials and the SQL Server
instance is set to only use OSA credentials, you will not like the outcome.
5. Uncheck sde owned schema as this was the old way ESRI used for the ArcSDE setup and
configuration. DBO schemas are much preferred as they have the most flexibility
within a windows environment.
6. Authorization file is the file created after authenticating ArcGIS Server (i.e. c:\program
files\ESRI\ License10.6\sysgen\keycodes)

20
ArcGIS Enterprise Administration - Part 1
 7. For your users who edit and publish maps, you will want them to create a connection to
the database. You can add database connections using the database connection utility
as well. This is a primary connection for anyone running full versions of SQL Server.
Go to the TOC of ArcCatalog again and expand Database Connections.

8. Click on ‘Add Database Connection’. Add instance and the database to the connection
strings. You have the choice of authenticating using the operating system or SQL
Server user accounts. In this example, we are going to use the OSA method. Click ok.

9. The connection string for the name of the connection is always arbitrary. Recommend
using the following naming convention.
• <instance if more than one instance; if not skip>.<database>.<version>.<OSA or
SQL user>
• For this example, we will be renaming the connection to vector.default.osa.
• Right click on the new connection and select rename. Type in the new name.

21
ArcGIS Enterprise Administration - Part 1
Registering the Geodatabase in ArcGIS Server
1. If you are using Operating System Authentication to publish map services and in order
for ArcGIS Server to connect to your database, you need to add ArcGIS Server service
user as read or read/write depending on your uses. Otherwise, use a SQL Server user
so you don’t need to add ArcGIS Server service user in the database.
2. You can either grant permissions to ArcGIS Server service user through the Geodatabase
Administration toolset in ArcCatalog or you can add the user in SQL Server and then
grant permissions of the data to the user. In this exercise, we’ll go through and add
ArcGIS Server user to SQL Server. This exercise is beneficial for GIS workflow
scenarios. We will be assigning ArcGIS Server service user that has read/write access
to the database with no DBO or other special privileges.
3. Go to SQL Server Management Studio and add the new user to your Geodatabase or
Geodatabases. Open Security within the SSMS TOC and right click on logins. Select
new login. Add ArcGIS Server Service user to the Geodatabase. Recommend assign a
default database to general groups or users other than master.
4. Go to User Mapping and select on the appropriate databases you want ArcGIS Server
service user to connect to. Make sure it has db_datareader or db_datawriter enabled
depending on the functionality you want. You may still need to assign privileges within
ArcCatalog in an enterprise setup.

22
ArcGIS Enterprise Administration - Part 1
Click ok and go to your workstation and open ArcCatalog. Go to the GIS Servers section within
the TOC of ArcCatalog. Connect to the administration connection by double clicking the
connection or right click and choose connect.

5. Once connected, right click on the connection and choose server properties.

23
ArcGIS Enterprise Administration - Part 1
 6. Go to the data store tab and click the plus button.

7. Notice there is already a LucityGIS and Raster database inside of my data store and
now I want to connect to the Replica. Add the replica name and click add for publisher
database connection.

24
ArcGIS Enterprise Administration - Part 1
 8. Add the appropriate information in instance and database. Click ok and ok.

9. Your database should have a green check next to it to signify completed successfully.

10. Now you are ready to publish map services from connections to the SQL Server
Enterprise Geodatabase.

25
ArcGIS Enterprise Administration - Part 1
Publishing and Configuring Map Services
1. Open ArcMap and locate your .mxd to publish to ArcGIS Server
• Recommend: If you have an image, recommend separating the image from the
vector map services for performance reasons.
• Recommend: Cached Image Service
• Recommend: Converting dynamic labels to Annotation and scale.
• Recommend: Make your map services scale dependent so not everything shows
up in a small scale extent.
• Recommend: Use ArcGIS Server Web Adaptor if using a DMZ. Please consult
your IT Administrator for setting up a DMZ.
• Recommend: Make sure your Symbols are bigger if using map services for
Mobile tablet applications.
2. When cartographic and scaling operations are complete, go to the file menu and click
on ‘Share As/Service’.

26
ArcGIS Enterprise Administration - Part 1
 3. Share as Service dialog prompts. There are three choices. Choose Publish a service
and click next.

4. Publish a Service dialog appears and give it a name. Click Next.

27
ArcGIS Enterprise Administration - Part 1
 5. Service Editor dialog will appear and this is where you add your settings for your map
service.

6. Click on Analyze at the top of the dialog. After the analyze tool has completed, it will
list errors, warnings and messages letting you know if there are any issues with the
performance of the data being rendered to ArcGIS Server.

• If errors, you need to resolve before proceeding.

• If warnings, you may or may not address these issues but ESRI highly
recommends fixing these issues.
• Messages are helpful hints on low priority performance issues. Most of the
time, these do not need to be addressed as issues as they are intended.
7. Go to parameters in the TOC for the Service Editor dialog and change the anti-aliasing
to Normal. Not all map services will show artifacts but if so normal is a good place to
start.
Note: Anti-Aliasing: A graphics technique that blends foreground and background
pixels near edges of objects to trick your eye into seeing smoother borders. You can
use this option if unwanted artifacts appear in your map displays, for example, jagged
lines, wavy lines or bands, and moiré patterns.

28
ArcGIS Enterprise Administration - Part 1
 Use the following options to get the graphics effect and performance that will
meet your map service needs:
• None: No antialiasing is performed.
• Fastest: Minimal antialiasing is performed, optimized for speed.
• Fast: Some antialiasing is performed, optimized for speed with better
quality than can be achieved with Fastest.
• Normal: A good balance of speed and quality.
• Best: The best quality antialiasing. This option takes the longest to
render.
• Force text anti-aliasing should be enabled by default.
8. Change the maximum number of records returned by the server. This will increase the
records returned by one query. 3000 is a good number to return unless your users need
more.

29
ArcGIS Enterprise Administration - Part 1
Unlock Schema
1. Set SchemaLockingEnabled to False in Service Properties of ArcGIS Server disables
schema locking. For those who wish to serve their production data as a map service,
this is extremely helpful if you need to make any kind of schema changes in your
database. However, feature services will persist a schema lock and override this
setting.
2. Within the service editor dialog when publishing a map service, go to Parameters
within the menu tabs on the left and click on advanced.

3. Click on the ‘Advanced’ button and change the values for schemaLockingEnabled to
false if you don’t want the map service to lock your database. Click ok when finished.

30
ArcGIS Enterprise Administration - Part 1
 4. Go to the Capabilities tab and make sure the Mapping service is the only box checked.

5. In pooling, usually 1 minimum and 5 maximum will suffice for most organizations. For
large organizations, increase based on user load.
6. In Processes, go to recycle this configuration every: <number> and change to a
desirable value. Usually, 12 hours is a good recycled time frame.
7. Change the starting at value to 6:00 am or whenever you would like it to start

8. If you want to cache, click on caching and change the

values to a suitable number. For basemaps and
imagery, recommend caching. For interactive map
services, leave caching turned off which is by default.
9. If you want to see the speed of your map service, click
on the preview icon in the menu toolbar. Otherwise,
click on publish.

31
ArcGIS Enterprise Administration - Part 1
 10. Below are Lucity map service deployment scenarios.
• You may have multiple map services for each group if needed. It really
depends on your setup with replication, versioning and how complex this may
be. Each organization may be different on how they want to handle
distributing maps to the users.
• Create Basemaps and Imagery services (tiled) for distribution to your users.
Consider your users and what content they would like to see in Basemaps.
• Make sure the basemap services are using the same coordinate systems in the
publishing map document. Portals use WGS 84 Web Mercator.
• Make sure operational layers are using wkid for the coordinate system in your
map document.

32
ArcGIS Enterprise Administration - Part 1
Enabling the Geometry Service
We need to enable the geometry service for Lucity GIS Web Map application to allow for
buffering, projecting, calculating lengths and areas.
1. Log into ArcGIS Server Manager.

2. Once logged in, go to the site root tab on the left side of the browser and click on the
folder called ‘Utilities’

3. Go to the Geometry Service and click on the play icon to start a stopped service.
4. Once complete, the service is now available.

33
ArcGIS Enterprise Administration - Part 1
Enabling the Printing Tools (Geoprocessing Service)
We need to enable the Printing Tools Geoprocessing Service for WebMap to print maps from
Lucity Web.
1. Log into ArcGIS Server Manager.

2. Once logged in, go to the site root tab on the left side of the browser and click on the
folder called ‘Utilities’

3. Go to PrintingTools and click on the play icon to start a stopped service.

4. Once complete, the service is now available.

34
ArcGIS Enterprise Administration - Part 1
Creating a Geocoding Service
Geocoding services allow Lucity GIS Web Map to find and display addresses on a map and see
how they relate to surrounding features. We do support composite geocoding services.
1. Open ArcCatalog
2. Create a geolocator in your publishing database
3. For dual ranges, make sure to set the ‘Match with no zones’ value to Yes

4. Right click on the geolocator in the Catalog Tree and click on Share As/Geocode service

5. Publish a service
6. Click Next

35
ArcGIS Enterprise Administration - Part 1
 7. Make the service name simple so it’s easier to remember.

8. Click Next
9. Choose a folder or keep default location as root
10. Click Continue
11. Select Parameters and change the interactive Find if you want more than 500 records
returned by the server.

12. Analyze and fix any errors. If no errors, publish

36
ArcGIS Enterprise Administration - Part 1
Securing a GIS Service
We now support ArcGIS Server secure GIS services (map, geocoding, geometry, feature, image,
and routing). In this section, we will describe the deployment of secure map services as a
built-in user store.
1. Log into ArcGIS Server Manager.

2. Go to the Security menu to configure the security features.

3. Click on configuration settings pencil to configure the type of data store.

37
ArcGIS Enterprise Administration - Part 1
 4. Again, we will be configuring a built-in store at the ArcGIS Server level not the web
store or the windows domain/LDAP configuration in this example.

5. Click Next
6. Finish after reviewing configuration
7. Optional (if using tokens), configure your Long-Lived tokens to the appropriate IT
policy. In this example, the lifespan for Long-lived tokens will be 1 day.

8. Click Save

38
ArcGIS Enterprise Administration - Part 1
 9. Go to the roles submenu of security

10. Click new role

11. Add a role called ‘viewer’. In this example, we will create a role used for the end
user. You can similarly create roles for administrators and publishers in the same way.
If you already had a user create, you can add them to the role by clicking the person
with the plus sign icon

12. Once finished, click on create.

13. In this example, we will create a user. Go to the submenu item called ‘users’.

39
ArcGIS Enterprise Administration - Part 1
 14. Click on new user.

15. Once the ‘new user’ dialog appears, add the user information. In this example, we will
be adding the newly create role to the user during the creation of the user account.
16. Add the information in the ‘new user’ dialog

17. Click on the person with the plus sign icon

18. Click create

19. We now have the new user added to the users list.

40
ArcGIS Enterprise Administration - Part 1
 20. Assuming you published a map service for the intention to secure, go to the main menu
and click on ‘services’

21. Click on the lock icon

22. Click on the radio button ‘Private, available only to selected users’ to enable security.
You have the choice to allow access to all users who are logged in which gives access to
all users in the ‘built-in’ users security store but in this example we only want to use
the ‘viewers’ role.
23. A message will appear ‘no roles have been selected’. This is a friendly reminder that
there have been no roles selected.

41
ArcGIS Enterprise Administration - Part 1
 24. Click on the person with the plus sign icon under roles. This will add the ‘viewers’
role into the ‘Allowed roles’ dialog.

25. Click Save

26. For the map service, you should now see the lock icon in the locked position.

42
ArcGIS Enterprise Administration - Part 1
 27. Test the map service security. You can do this by going to the rest endpoint of the
map service.
28. Example: http://<servername>/<alias>/rest/services/<nameofmapservice>/MapServer
29. Supply the newly created user credentials and click on login

30. If you see the rest

service directory open,
you have successfully
secured your map
service.

43
ArcGIS Enterprise Administration - Part 1
How to Create a Feature Service
Redlining
To configure the Geodatabase and ArcGIS Server to enable redlining capability, we must create
a feature class or feature classes depending on the type of redlining capability you desire. We
support points, lines and polygons. Below we will demonstrate the creation of a feature
dataset, three feature classes and published them to a feature service.
1. Open ArcMap
2. Click on the Catalog button if it is not already open.

3. In the Catalog Tree, go to database connections and open your production GIS
database.

4. Right click on the connection and choose new and a submenu will appear.

44
ArcGIS Enterprise Administration - Part 1
 5. Click on Feature Dataset

6. Give the Feature Dataset a name. In this example we will call it Redlining

7. Click Next

45
ArcGIS Enterprise Administration - Part 1
 8. Set your coordinate system for the feature dataset

9. Click Next
10. Click Next unless you need vertical coordinate systems applied to the data

46
ArcGIS Enterprise Administration - Part 1
 11. Set your Z, M and XY tolerance. In this example, we will take the defaults.

12. Click Finish

13. In the Database Connection, right click on the newly created Feature Dataset and
choose new and submenu Feature Class

47
ArcGIS Enterprise Administration - Part 1
 14. In this example we will create a point Feature Class and call in RPoint

15. Click Next

16. Except defaults unless you are using configuration keywords
17. Click Next

48
ArcGIS Enterprise Administration - Part 1
 18. Add desired fields to your redlining point feature class. If you plan on using editing
user, date and last editing fields, make sure you turn on editor tracking after creating
the feature class.

19. Click Finish

20. Repeat steps 13 through 18 to create polygon and line Feature Classes if desired.
21. Make sure to assign credentials for access to the newly create feature dataset and
optional versioning before publishing.
22. Optional: Right click on each feature class that you would like to enable edit tracking
and choose properties.
23. Go to the tab Editor Tracking and click on Enable Editor Tracking
24. Map the fields to the appropriate Feature Class fields

49
ArcGIS Enterprise Administration - Part 1
 25. We only use UTC

26. Click Apply or ok.

50
ArcGIS Enterprise Administration - Part 1
Publishing a Feature Service

1. Go to the File/Share As/Service menu option to create a service

2. Select Publish a Service

3. Click Next

51
ArcGIS Enterprise Administration - Part 1
 4. Choose server connection and create service name

5. Click Next
6. Use in folder or in the root of ArcGIS service directory
7. Click Continue
8. Go to Parameters and click on Advanced

52
ArcGIS Enterprise Administration - Part 1
 9. Click Ok
10. Go to the Capabilities tab and make sure Mapping and Feature Access is selected.

53
ArcGIS Enterprise Administration - Part 1
 11. Click on the submenu tab ‘Feature Access’ and add the selection ‘Enable ownership-
based access control on features’. This option will only allow the created user features
to be updated by the owner of the features but only allow the other users to query the
created data.

12. Analyze to make sure no errors are present.

13. Click Publish
14. Optional: If you wish to secure the feature service, go to the below section of
‘Security a Map Service’ and add each user account to have access to the newly
created map/feature service.
15. For Editing feature services, go through the same process above. Make sure you are
using an edit user when publishing.

54
ArcGIS Enterprise Administration - Part 1
Publishing an Offline Feature Service
In order to support offline mode, we must prepare the data and configure the feature service.
Below, we will demonstrate the setup for supporting offline feature services.

Prepare Data
• Add GlobalIDs
• Enable geodatabase archiving
o Make sure there is enough space for your database to grow before enabling
archiving on your enterprise geodatabase
• You have the capability to add create, delete, query, sync and update.
o For Lucity, we currently do not plan to provide offline map edits.

Publishing Preparation
• Consider symbology
• Feature Services will lock database for any schema changes.
• Needs to be an edit user to database when publishing map
• Consider securing feature service
• Remove Joins
o Joins and Relates are not accessible through Feature Services
• Ensure all layers are in the same versioned/un-versioned state
o Layers in the TOC cannot have mix match of versioned and un-versioned data

55
ArcGIS Enterprise Administration - Part 1
 End Users
Make sure you are connected to a fast internet connection or LAN line when checking out
map data
1. Open ArcCatalog. Right click on your feature classes or feature datasets and choose
manage, Add GlobalIDs.

56
ArcGIS Enterprise Administration - Part 1
 2. To enable archiving, right Click on Feature Datasets or Feature Classes You can either
publish a new map/feature service or enable the feature service within an existing map
service. In order to have sync capability, make sure you log in as an edit user.

3. Once complete, add data to map document.

57
ArcGIS Enterprise Administration - Part 1
 4. Like with Redlining, go through the process of publishing a feature service but adding
sync capability. You can have create, delete, query, sync and update enabled.

58
ArcGIS Enterprise Administration - Part 1