Predefined Roles

About Predefined Roles

To enable the availability of specific capabilities provided by SAS Web Report Studio and SAS Web Report Viewer users, each user can be assigned to one or more predefined roles.
Note: You are not required to use predefined roles. However, it is recommended that you do not modify predefined roles. You can create roles to meet your own requirements, and assign capabilities to those roles.

Predefined Roles and Capabilities for SAS Web Report Studio

SAS Web Report Studio includes three predefined roles with certain capabilities that are assigned to these roles initially. These predefined roles are:
  • Report Viewing
  • Report Creation
  • Advanced
You are not required to use predefined roles. You can create roles and assign capabilities that meet the needs of your organization.
The following display of the Web Report Studio: Report Viewing Properties window shows the capabilities that are assigned initially to the predefined role, Report Viewing. This window is accessed by navigating the SAS Management Console to the User Manager and selecting the Capabilities tab in the Web Report Studio: Report Viewing role window.
Capabilities for the Report Viewing Role
Capabilities for the Report Viewing Role
The following table shows three predefined roles, and capabilities that are initially assigned to these roles in SAS Web Report Studio. Capabilities that are assigned initially to these roles are indicated by an X. You can modify the original settings, assign additional capabilities, or remove capabilities from these roles.
Certain capabilities are duplicated across the three predefined roles. For example, all of the assigned capabilities for Report Viewing are also available in the Report Creation and Advanced roles.
Note: If a user has been assigned multiple roles and multiple capabilities, removing a capability from one role does not negate that capability if the user was assigned that capability in a different role. For example, if John was assigned Print capability in all three roles (Report Viewing, Report Creation, and Advanced), removing the Print capability from the Advanced role alone does not prevent John from using that capability. In order to completely remove the Print capability for John, it must be deselected for all three roles to which John belongs. Alternatively, John can be assigned to a single role where the Print capability is not assigned.
Roles and Capabilities for SAS Web Report Studio
Capability
Report Viewing
Report Creation
Advanced
Basic
Comments
X
X
X
Print
X
X
X
Allow Direct Access to Information Maps1
X
X
X
Allow Direct Access to Cubes2
X
X
X
Allow Direct Access to Tables2
Promote WRV to WRS
X
X
X
Refresh Data
X
X
X
Modify Repository
X
X
X
OLAP
Drill
X
X
X
Drill to Detail
X
X
X
Expand and Collapse
X
X
X
Expand and Collapse All
X
X
Output
Save
X
X
X
Email
X
X
Export
X
X
Schedule Own Report
X
X
Report Creation
Create Report
X
X
Basic Edit
X
X
Aggregate or Detail
X
Select All Data
X
X
Select Data in View
X
X
Copy Section2
X
X
Advanced Report Creation
Create Cascade Reports
Create Report Links
X
Create Remote Application Report Links2
X
Advanced Edit
X
Update Resources3
X
Advanced Scheduling
Distribute
X
Save Archive
X
Schedule Any Report
X
Schedule Folder
X
Administrative
Manage Distribution List
1If you are using (or if you migrated from) SAS Web Report Studio 4.2, then the name of this capability is Open Maps as Reports.
2This capability is available in SAS Web Report Studio 4.3 and later.
3If you migrated from SAS Web Report Studio 4.2, then the name of this capability is Repair Report.
In order to be functional, some capabilities have prerequisites. Here is an explanation of each capability and prerequisites for certain capabilities:
Basic:Comments
provide access to Comment Manager.
Basic:Print
generate PDF output.
Basic:Allow Direct Access to Information Maps
open information maps directly as reports. Without this capability, information maps are suppressed from the Open and Manage pages. With this capability, users can access information maps from the Open and Manage pages and view them as reports. Users who have the Create Report capability can select an Edit action when an information map is selected.
If you are using (or if you migrated from) SAS Web Report Studio 4.2, then the name of this capability is Open Maps as Reports.
Basic:Allow Direct Access to Cubes
open cubes directly as reports, or open cubes as information maps when specifying a data source. Without this capability, cubes are suppressed from the Open and Manage pages. With this capability, users can access cubes from the Open and Manage pages and view them as reports. Users who have the Create Report capability can select an Edit action when a cube is selected.
This capability is available in SAS Web Report Studio 4.3 and later.
Basic:Allow Direct Access to Tables
open tables directly as reports, or open tables as information maps when specifying a data source. Without this capability, tables are suppressed from the Open and Manage pages. With this capability, users can access tables from the Open and Manage pages and view them as reports. Users who have the Create Report capability can select an Edit action when a table is selected.
By default, this capability is not assigned to any roles because it would allow users to bypass BI row-level permissions. If you have not implemented BI row-level permissions, then consider adding this capability to the same roles to which Allow Direct Access to Cubes is assigned.
This capability is available in SAS Web Report Studio 4.3 and later.
Basic:Promote Web Report Viewer to Web Report Studio
displays the SAS Web Report Studio interface when a user requests to view a report from another product such as SAS Information Delivery Portal. Initially, this capability is assigned to all predefined roles. If this capability is unassigned, and a user's request to view a report from within another product is granted, then the SAS Web Report Viewer interface is used to present the report. When this capability is assigned to a role to which a user belongs, the SAS Web Report Studio interface is displayed when that user requests to view a report through the SAS Information Delivery Portal or other products.
Basic:Refresh Data
refresh data for reports.
Basic:Modify Repository
provide basic modifications to repository such as copy, move, rename, and delete. This capability does not grant the ability to save changes to reports.
OLAP:Drill
perform an OLAP drill operation.
OLAP:Drill to Detail
drill through to detail data for a single OLAP value.
OLAP:Expand and Collapse
expand or collapse OLAP data.
OLAP:Expand and Collapse All
expand or collapse an entire OLAP hierarchy. This capability requires the Report Creation:Basic Edit capability and the OLAP:Expand and Collapse capability.
Output:Save
save changes to reports. This capability requires that the user also has Modify Repository capability.
Output:E-mail
e-mail a report link.
Output:Export
export report content to Microsoft Excel.
Output:Schedule Own Report
schedule reports authored by the users themselves. The Schedule All Reports capability is available in the SAS Web Report Studio's Advanced role.
Report Creation:Create Report
create new reports. The Save capability is a prerequisite for this capability.
Report Creation:Basic Edit
perform basic editing operations for tables and graphs. Operations include:
  • Assign Data
  • Total dialog box access
  • Control of Total Type for OLAP reports only (parent versus visual)
  • Percent of Total
  • Filter and Rank
  • Conditional Highlighting
  • Rotate Table
  • View Data Details
  • Sort, Sort Priority, Remove All Sort
  • Move
  • Hide
  • Replace / Swap
  • All Table Properties
  • All Graph Properties
Report Creation:Aggregate or Detail
specify whether data is detail data or aggregated data (relational reports only)
Report Creation:Select All Data
able to choose “Select All” data items from the Select Data dialog box.
Report Creation:Select Data in View
use the Select Data dialog box to select data while viewing a report.
Report Creation:Copy Section
create a new report section that is a complete copy of another section. This capability is available in SAS Web Report Studio 4.3 and later.
Advanced Report Creation:Create Cascade Prompts
create cascading prompts.
Advanced Report Creation:Create Report Links
create linked reports.
Advanced Report Creation:Create Remote Application Report Links
create linked reports that link to another SAS application. This capability is available in SAS Web Report Studio 4.3 and later.
Advanced Report Creation:Advanced Edit
enable users to perform the following functions:
  • Isolate
  • Member Properties
  • Suppress Empty
The Report Creation: Basic Edit capability is a prerequisite for this capability. In SAS Web Report Studio, the Include Member with Only Missing Values menu item is available only for multidimensional data sources. The Suppress Empty function in the Advanced Edit capability is required in order for users of multidimensional data sources to view and use the Include Member with Only Missing Values menu item under the Data Menu in SAS Web Report Studio.
Advanced Report Creation:Update Resources
update an invalid information map reference that is contained in a report definition. If you are using (or if you migrated from) SAS Web Report Studio 4.2, then the name of this capability is Repair Report.
Advanced Scheduling:Distribute
schedule a report distribution.
Advanced Scheduling:Save Archive
archive file versions. When creating a pre-generated version of a report (for example, a scheduled report), a version of the report is archived as a PDF file. Reports with archived versions are visually different in report selection dialog boxes, and access is allowed to these archived versions.
Advanced Scheduling:Schedule Any Report
schedule any report to which the users have WriteMetadata access, including the reports that they have authored.
Advanced Scheduling:Schedule Folder
schedule a folder.
Administrative:Manage Distribution List
create, edit, or delete a distribution list.
CAUTION:
Use of this capability creates a new physical table. Therefore, this capability must be restricted to few users. The distribution list contains e-mail addresses. Initially, this capability is not assigned to any SAS Web Report Studio role. An administrator can assign this capability to the Advanced role, or create a new role (for example, a role named as Manage Distribution) specifically for this capability and assign this role to a restricted number of users.

Predefined Roles for SAS Web Report Viewer

SAS Web Report Viewer includes two predefined roles with certain capabilities assigned initially to these roles. These predefined roles are:
  • Report Viewing
  • Advanced
SAS Web Report Viewer does not allow users to create or modify reports.
The following table shows the two predefined roles for SAS Web Report Viewer. Capabilities that are initially assigned to these roles are indicated by an X. You can unassign existing capabilities or reassign capabilities to these roles. Unlike SAS Web Report Studio, SAS Web Report Viewer has a smaller subset of capabilities available for roles.
Roles and Capabilities for SAS Web Report Viewer
Capability
Report Viewing
Advanced
Basic
Comments
X
X
Print
X
X
Allow Direct Access to Information Maps1
X
X
Allow Direct Access to Cubes2
X
X
Allow Direct Access to Tables2
Refresh Data
X
X
OLAP
Drill
X
X
Drill to Detail
X
X
Expand and Collapse
X
X
Expand and Collapse All
X
Output
E-mail
X
Export
X
1If you are using (or if you migrated from) SAS Web Report Viewer 4.2, then the name of this capability is Open Maps as Reports.
2This capability is available in SAS Web Report Viewer 4.3 and later.
Basic:Comments
provide access to Comment Manager.
Basic:Print
generate PDF output.
Basic:Allow Direct Access to Information Maps
open information maps directly as reports. Without this capability, information maps are suppressed from the Open and Manage pages. With this capability, users can access information maps from the Open and Manage pages and view them as reports.
If you are using (or if you migrated from) SAS Web Report Viewer 4.2, then the name of this capability is Open Maps as Reports.
Basic:Allow Direct Access to Cubes
open cubes directly as reports, or open cubes as information maps when specifying a data source. Without this capability, cubes are suppressed from the Open and Manage pages. With this capability, users can access cubes from the Open and Manage pages and view them as reports.
This capability is available in SAS Web Report Viewer 4.3 and later.
Basic:Allow Direct Access to Tables
open tables directly as reports, or open tables as information maps when specifying a data source. Without this capability, tables are suppressed from the Open and Manage pages. With this capability, users can access tables from the Open and Manage pages and view them as reports.
By default, this capability is not assigned to any roles because it would allow users to bypass BI row-level permissions. If you have not implemented BI row-level permissions, then consider adding this capability to the same roles to which Allow Direct Access to Cubes is assigned.
This capability is available in SAS Web Report Viewer 4.3 and later.
Basic:Refresh Data
refresh data for reports.
OLAP:Drill
perform an OLAP drill operation.
OLAP:Drill to Detail
drill through to detail data for a single OLAP value.
OLAP:Expand and Collapse
expand or collapse operation for OLAP data.
OLAP:Expand and Collapse All
expand or collapse an entire OLAP hierarchy. This capability requires the Report Creation:Basic Edit capability and the OLAP:Expand and Collapse capability.
Output:E-mail
e-mail a report link.
Output:Export
export report content to Microsoft Excel.