What is the difference between the five primary administrative roles within Esri software environments?

This article clarifies the distinctions between the five primary administrative roles within Esri software environments, ranging from account management in My Esri to site-specific administration in ArcGIS Online and ArcGIS Enterprise. Specifically, these roles are:

• Primary Maintenance Contact (PMC): My Esri
• My Esri Administrator
• ArcGIS Online Administrator
• Initial Administrator Account (IAA): Portal for ArcGIS
• Primary Site Administrator (PSA): ArcGIS Server

PMC and My Esri Administrator are both roles within My Esri, but each with a different focus, maintenance support vs. access management.
ArcGIS Online Administrator, PSA, and IAA are platform-specific admin roles for ArcGIS Online and ArcGIS Enterprise.

Primary Maintenance Contact (PMC)

• Role: Designated ‘root’ contact for managing organization’s software maintenance and subscriptions within My Esri.
• Platform: My Esri (my.esri.com)
• Key Duty: Managing maintenance and support entitlements, receiving renewal notices and quotes, and managing support cases. This account typically grants initial ‘Administrator’ permissions to others.
• Relation to Others: The PMC is not necessarily an administrator in My Esri or ArcGIS Online/ArcGIS Enterprise but often works closely with those who are. The PMC and My Esri Administrator can be, but are not always, the same individual.

My Esri Administrator

• Role: A user within an organization who has elevated permissions to manage the organization's My Esri account.
• Platform: My Esri (my.esri.com)
• Key Duty: Inviting/removing users and assigning permissions for licensing, software downloads, and technical support access.
• Relation to Others: This is a distinct role from the PMC. While the My Esri Administrator manages user access to resources, the PMC remains the official contact for maintenance. 

ArcGIS Online Administrator

• Role: User role with highest privilege level within a specific ArcGIS Online organization.
• Platform: ArcGIS Online (SaaS)
• Key Duty: Assigning member roles and licenses, managing organizational settings, security configurations, credit budgeting, and user content. 
• Relation to Others: This role is independent of My Esri roles. However, the ArcGIS Online Administrator frequently coordinates with the My Esri Administrator to ensure licenses are available for provisioning. An organization may or may not have one person who is PMC, My Esri Administrator and ArcGIS Online Administrator.

Initial Administrator Account (IAA)

• Role: The very first admin account created during ArcGIS Enterprise site configuration.
• Platform: ArcGIS Enterprise (Portal for ArcGIS)
• Key Duty: Sets up the organization, creates additional admin accounts and user management. It is critical for initial site configuration.
• Relation to Others: This is a software role specifically for Portal for ArcGIS and carries no inherent permissions within My Esri or the Esri maintenance system.

Primary Site Administrator (PSA)

• Role: The very first account created when creating an ArcGIS Server site. It is the main admin for ArcGIS Server (ArcGIS Server Manager).
• Platform: ArcGIS Server 
• Key Duty: Managing the ArcGIS Server Manager, configuring site security and overseeing server-side services.
• Relation to Others: Not related to My Esri or PMC roles. In a federated environment, the PSA is a critical fail-safe account. It is the only identity capable of logging directly into the ArcGIS Server (via port 6443) if the connection to the Portal is lost.