Mastering ArcGIS Enterprise Administration

The existing enterprise system

ArcGIS Server also can leverage an existing external user and role store such as Microsoft Active Directory (AD) or Lightweight Directory Access Protocol (LDAP). In this configuration, the AD or LDAP server is a read-only store for ArcGIS Server to access; users and roles from AD or LDAP can be viewed, but not edited or managed, that is still done at that AD or LDAP level. This store type works well in medium to large-sized organizations that have a well-maintained enterprise security store whose users and roles can be used to efficiently enforce security within ArcGIS Server.