laptop and a wrench

Bug

The 'Update' administrative privilege allows users to edit all features, even when the 'Edit Features' and 'Edit with Full Control' privileges are disabled.

ArcGIS Online
Bug ID Number BUG-000150054
SubmittedJune 16, 2022
Last ModifiedMay 16, 2025
Applies toArcGIS Online
Version found10.1
Operating SystemWindows OS
Operating System Version10.0
Version FixedPlanned Release Date: Q2 2023
StatusFixed

Additional Information

This is a long-standing feature designed to work this way. The 'Update' administrative privilege (also known as portal:admin:updateItems privilege in the REST API) allows a custom role with the administrative Update power over any item in the organization. This privilege is also the one that enables user to edit and have full editing control (in Map Viewer, for example) despite the item settings. This editing change is not immediately apparent when the option in the 'Edit Role' user interface is enabled. A better documentation about this behavior, and updating the description in the 'Edit Role' user interface is under progress. These two pages in the documentation are going to be updated in the June 2023 release to clarify the expected behavior: https://docdev.arcgis.com/en/arcgis-online/administer/privileges-for-roles-orgs.htm#ESRI_SECTION1_41D9146A73474E10A94E5EBBE3A79114 and https://developers.arcgis.com/rest/users-groups-and-items/privileges.htm.

Steps to Reproduce

Bug ID: BUG-000150054

Software:

  • ArcGIS Online

Get notified when the status of a bug changes

Download the Esri Support App

Discover more on this topic

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options