Feature layers remain editable although editing is disabled in the Enterprise portal or ArcGIS Online

Description

In the ArcGIS Enterprise portal or ArcGIS Online, disabling editing for a feature layer protects data integrity and prevents unauthorized modifications. However, certain organization members still have the ability to edit feature layers even when editing is disabled, including modifying data in the layer’s table, updating the item page, or deleting the item.

In this example, the attributes of the feature layer are editable by some organization members, as shown in the image below.

Cause

The organization members are assigned custom roles with administrative privileges to update and delete content. These privileges enable them to modify content owned by other members and edit the data regardless of editing restrictions. For more information, refer to Portal for ArcGIS: Administrative privileges or ArcGIS Online: Administrative privileges.

Solution or Workaround

Update the member's custom role to remove administrative privileges

1. Sign in to the ArcGIS Enterprise portal or ArcGIS Online as an administrator or a custom role with administrative privileges to manage member roles.
2. On the Organization tab, click Settings.
3. Click Member roles.
4. Under Manage roles, click More options for the role to edit and select Edit.
5. In the Edit role dialog box, under Role privileges, expand Administrative privileges and Content.
6. Disable Update and Delete.
7. Click Save.

Share the feature layer as a map image layer

To prevent data editing, open the feature layer in ArcGIS Pro and publish it as a map image layer, which ensures read-only access. Refer to ArcGIS Pro: Share a map image layer using the default configuration for instructions.

The table below shows that the feature layer's data is non-editable by the organization members.