Mastering ArcGIS Enterprise Administration

Lock resource access down

Limiting access to resources in your GIS system goes back to the principle of least privileges that we discussed in Chapter 6, Security. For example, if your ArcGIS Server configuration store is on a network share, ensure that only the ArcGIS Server account and any GIS administrator accounts have access to that location. One wrong (even accidental) move by a user and a directory in the config store could be deleted, potentially bringing down your entire system. Likewise, we discussed earlier in this chapter having a well-known location for your service map documents. A location such as this would only need to be accessible by GIS publishers and administrators.

Measures such as these are not only intended to keep ...