Permissions by Task :: SAS(R) 9.3 Intelligence Platform: Security Administration Guide

Introduction

The following tables show required metadata layer permissions for selected tasks. For each task, a user must have the specified access to the specified metadata objects.

Tip

For any change-managed areas or resources change-managed users should have CheckInMetadata (CM) permission (instead of WM or WMM). See Setting up Change Management in SAS Intelligence Platform: Desktop Application Adminstration Guide.

Working with Folders

Task	Repository	Parent Folder	Folder	Item
Add a folder	RM, WM	RM, WMM1	-	-
Delete a folder	RM	RM, WMM1	RM, WM	-
Rename a folder	RM	RM	RM, WM	-
Set folder permissions	RM	RM	RM, WM	-
Add an item to a folder	RM, WM	RM	RM, WMM	-
Delete an item from a folder	RM	RM	RM, WMM	RM, WM
Copy/export items	RM	RM	RM	RM
Paste/import items	RM, WM	RM	RM, WMM	-
1If the parent folder is the root folder , you need RM, WM on the root folder.

Working with Reports

Task	Repository	Parent Folder	Report	Stored Process1	Information Map1	Data
Create and save a new report	RM, WM	RM, WMM	-	RM	RM, R	RM, R2
Delete a report	RM	RM, WMM	RM, WM	-	-	-
View or refresh a report	RM	RM	RM	RM	RM, R	RM, R2
View a batch report	RM	RM	RM	-	-	-
Edit or rename a report	RM	RM	RM, WM	-	-	-
Set report permissions	RM	RM	RM, WM	-	-	-
1This is not a required element for a report.
2The Read permission is required for data that is accessed through the metadata LIBNAME engine or the OLAP server.

Working with Information Maps

Task	Repository	Parent Folder	Information Map	Stored Process1	Data
Create and save a new information map	RM, WM	RM, WMM	-	RM	RM, R2
Delete an information map	RM	RM, WMM	RM, WM	-	-
Set information map permissions	RM	RM	RM, WM	-	-
Edit or rename an information map	RM	RM	RM, WM	-	-
Run queries in an information map	RM	RM	RM, R	RM	RM, R2
1This is not a required element for an information map.
2The Read permission is required for data that is accessed through the metadata LIBNAME engine or the OLAP server.

Working with Stored Processes

Task	Repository	Parent Folder	Application Server	Stored Process	Data
Register a stored process	RM, WM	RM, WMM	RM, WM	-	-
Delete a stored process	RM	RM, WMM	RM, WM	RM, WM	-
Set stored process permissions	RM	RM	RM	RM, WM	-
Run a stored process	RM	RM	RM	RM	RM, R1
1The Read permission is required for data that is accessed through the metadata LIBNAME engine or the OLAP server.

Working with Publishing Channels

Task	Repository	Parent Folder	Channel	Subscriber
Add a channel or subscriber	RM, WM	RM, WMM	-	-
Delete a channel or subscriber	RM	RM, WMM	RM, WM	RM, WM
Edit a channel or subscriber	RM	RM	RM, WM	RM, WM
Publish content to a channel	RM, WM1	RM	RM, W, WM1	RM2
1WM is required if the channel has an archive persistent store.
2Content is published to only those subscribers for whom you have RM.

Working with Tables

Task	Repository	Server1	Library	Parent Folder	Table	Column
Register a table	RM, WM	RM	RM, WM	RM, WMM	-	-
Delete a table	RM	RM	RM, WM	RM, WMM	RM, WM	-
Set table permissions	RM	-	RM	RM	RM, WM	-
Access table data	RM	RM	RM	RM	RM, R2	RM
Register a library	RM, WM	RM, WM	-	RM, WMM	-	-
1SAS Application Server
2The Read permission is required for data that is accessed through the metadata LIBNAME engine.

Working with SAS OLAP Cubes

Task	Repository	Server1	Schema	Parent Folder	Cube	Source Data
Register a cube	RM, WM	RM	RM, WM	RM, WMM	-	RM, R2
Delete a cube	RM	RM	RM, WM	RM, WMM	RM, WM	-
Rebuild a cube	RM	RM	RM	RM	RM, WM	RM, R2
Refresh a cube	RM	RM	RM	RM	RM, R	RM, R2
Access cube data	RM	RM	RM	RM	RM, R	-
Register a schema	RM, WM	RM, WM	-	RM, WMM	-	-
Set cube permissions	RM	-	RM	RM	RM, WM	-
Use the OLAP Server Monitor	RM	A	-	-	-	-
1SAS Application Server
2The Read permission is required for data that is accessed through the metadata LIBNAME engine.

Working with SAS OLAP Shared Dimensions

Task	Repository	Server1	Schema	Parent Folder	Cube	Shared Dimension	Source Data
Register a shared dimension	RM, WM	RM	RM, WM	RM, WMM	-	-	RM, R2
Delete a shared dimension3	RM	RM	RM, WM	RM, WMM	-	RM, WM	-
Rebuild a shared dimension	RM	RM	RM	RM	-	RM, WM	RM, R2
Use a shared dimension	RM	RM	RM	RM	RM, R	RM	-
1SAS Application Server
2The Read permission is required for data that is accessed through the metadata LIBNAME engine.
3You cannot delete a shared dimension that has any associations to any cubes.