Authorization Data Sets

For reference, this topic documents the structure of the generated tables.
work.mdsecds_join (the Primary Table for Reporting; Combines objs, permsw, pconds)
Column Name
Column Contents
IdentityDispName
The display name of this user or group (for example, SAS Demo User). If there is no display name, this column contains the same value as the IdentityName column.
IdentityName
The name of this user or group (for example, sasdemo).
IdentityType
Person, IdentityGroup, or Role.
Location
A container path for this object (for example, \Shared Data\Sales). The path usually consists of folder names but can also include names of other containers.
MetadataCreated
The date when this object was created.
MetadataType
The internal metadata type for this object.
MetadataUpdated
The most recent date that this object was updated.
ObjId
The metadata ID for this object (for example, A5HDAJSI.B900066J).
ObjName
The name of this object (for example, Shoe Sales by Region).
ObjUri
The uniform resource identifier for this object (for example, omsobj:PhysicalTable/A5XT9KUX.B80000001).
ParentObjId
The metadata ID for this object's immediate parent.
Permissions
A list of the permissions to inspect for this object. If the list is blank, then all permissions that are applicable to this type of object are inspected.
(permissions)
A separate column for each permission. Each cell in these columns contains a value that indicates whether this permission is effectively granted or denied for this identity. The type of setting (explicit, ACT, or indirect) is also indicated. For example, Granted by ACT or Denied Explicitly or Granted Indirectly.
PublicType
The public metadata type for this object.
work.mdsecds_objs (Contains Folder and Member Information)
Column Name
Column Contents
Desc
Description information for this object. For most objects, this information comes from the Description field on the General tab in the object's properties dialog box.
Location
A container path for this object. The path usually consists of folder names but can also include names of other containers.
MetadataCreated
The date when this object was created.
MetadataType
The internal metadata type for this object.
MetadataUpdated
The most recent date that this object was updated.
ObjId
The metadata ID for this object.
ObjName
The name of this object.
ObjUri
The uniform resource identifier for this object.
ParentObjId
The metadata ID for this object's immediate parent.
Permissions
A list of the permissions to inspect for this object. If the list is blank, then all permissions that are applicable to this type of object are inspected.
PublicType
The public metadata type for this object.
work.mdsecds _pconds (Contains Permission Condition Expressions)
Column Name
Column Contents
Condition
The expression that limits this grant.
IdentityName
The name of this user or group.
IdentityType
Person, IdentityGroup, or Role.
ObjUri
The uniform resource identifier for this object.
Permission
The name of this permission (for example, Read).
work.mdsecds_permsw (Contains Permissions Data Transformed to Wide Format)
Column Name
Column Contents
IdentityDispName
The display name of this user or group (or the name if there is no display name).
IdentityName
The name of this user or group.
IdentityType
Person, IdentityGroup, or Role.
ObjName
The name of this object.
ObjUri
The uniform resource identifier for this object.
(permissions)
A separate column for each permission. Each cell in these columns contains a value that indicates whether this permission is effectively granted or denied for this identity. The type of setting (explicit, ACT, or indirect) is also indicated.
work.mdsecds _permsl (Contains Permissions Data in Original Long Format)
Column Name
Column Contents
Authorization
A value that indicates where this permission is granted or denied for this identity. The type of setting (explicit, ACT, or indirect) is also indicated.
Conditionflg
A value that indicates whether this permission setting is conditional. The value is either blank (no condition) or * (condition applies and is written to the pconds table).
IdentityDispName
The display name of this user or group (or the name if there is no display name).
IdentityName
The name of this user or group.
IdentityType
Person, IdentityGroup, or Role.
ObjName
The name of this object.
ObjUri
The uniform resource identifier for this object.
Permission
The name of this permission.