Managing Root Level Authorizations :: SAS® Business Data Network 3.2: User's Guide

Overview

When you log on to SAS Business Data Network, you are granted access to applications and features based on the roles and capabilities that are associated with your login. Typically, these roles are assigned to a group to which you belong. For example, by default, members of the Data Management Executives group have the Data Management: Business Data Network role. This role has capabilities that enable you to view terms and their contents and notify contacts in SAS Business Data Network. Without these capabilities, you cannot see terms in SAS Business Data Network.

Note: You can add and remove identities in the Authorization - Root Level window. To access this window, click Manage Root Level Authorizations in the Action button at the top of SAS Business Data Network main window. Click Help for information about using the Authorization - Root Level window. Denying Create Children permission to a group or user at root level prevents that group or user from creating any term.

Default Groups, Roles, and Capabilities

The groups, roles, and capabilities listed in the following table are installed in SAS Management Console when SAS Business Data Network is installed:

Default Groups, Roles, and Capabilities
Role Name	Role Description	Capability IDs	Groups That Get This Role by Default
Business Data Network: Administration	Provides all functionality related to administrative activities	ViewApplication, ViewTermAttributes, ViewTermStatus, ViewTermImportance, ViewTermLinks, ViewTermRelatedTags, ViewTermRelatedTerms, ViewTermHierarchy, ViewTermAssociatedItems, ViewTermNotes, ViewTermContacts, ViewTermHistory, ViewTermComments, EditTermTypes, SecureTermTypes, SecureTerms, ImportTerms, UnlockAnotherUsersTerms, ViewAnotherUsersDraft, ManageDeletedTerms, EditTags, EditTerms, EditTermContents, EditTermAttributes, EditTermStatus, EditTermImportance, EditTermLinks, EditTermRelatedTags, EditTermRelatedTerms, EditTermHierarchy, EditTermAssociatedItems, EditTermNotes, EditTermContacts, RestoreTermVersion, NotifyContacts, Workflow Publish, Workflow Delete	Data Management Administrators
Business Data Network: Power Editor	Provides all the functionality for creating and editing terms	ViewApplication, ViewTermAttributes, ViewTermStatus, ViewTermImportance, ViewTermLinks, ViewTermRelatedTags, ViewTermRelatedTerms, ViewTermHierarchy, ViewTermAssociatedItems, ViewTermNotes, ViewTermContacts, ViewTermHistory, ViewTermComments, UnlockAnotherUsersTerms, ImportTerms, EditTags, EditTerms, EditTermContents, EditTermAttributes, EditTermStatus, EditTermImportance, EditTermLinks, EditTermRelatedTags, EditTermRelatedTerms, EditTermHierarchy, EditTermAssociatedItems, EditTermNotes, EditTermContacts, RestoreTermVersion, NotifyContacts	Data Management Power Users
Business Data Network: Technical Editor	Provides all the functionality for creating and editing terms	ViewApplication, ViewTermAttributes, ViewTermStatus, ViewTermImportance, ViewTermLinks, ViewTermRelatedTags, ViewTermRelatedTerms, ViewTermHierarchy, ViewTermAssociatedItems, ViewTermNotes, ViewTermContacts, ViewTermHistory, ViewTermComments, EditTags, EditTerms, EditTermContents, EditTermAttributes, EditTermStatus, EditTermImportance, EditTermLinks, EditTermRelatedTags, EditTermRelatedTerms, EditTermHierarchy, EditTermAssociatedItems, EditTermNotes, EditTermContacts, RestoreTermVersion, NotifyContacts	Data Management Power Users
Business Data Network: Business Editor	Provides all the functionality for creating and editing terms	ViewApplication, ViewTermAttributes, ViewTermStatus, ViewTermImportance, ViewTermLinks, ViewTermRelatedTags, ViewTermRelatedTerms, ViewTermHierarchy, ViewTermAssociatedItems, ViewTermNotes, ViewTermContacts, ViewTermHistory, ViewTermComments, EditTags, EditTerms, EditTermContents, EditTermAttributes, EditTermStatus, EditTermImportance, EditTermLinks, EditTermRelatedTags, EditTermRelatedTerms, EditTermHierarchy, EditTermAssociatedItems, EditTermNotes, EditTermContacts, RestoreTermVersion, NotifyContacts	Data Management Business Users
Business Data Network: Technical Approver	Provides all the functionality for approving terms	ViewApplication, ViewTermAttributes, ViewTermStatus, ViewTermImportance, ViewTermLinks, ViewTermRelatedTags, ViewTermRelatedTerms, ViewTermHierarchy, ViewTermAssociatedItems, ViewTermNotes, ViewTermContacts, ViewTermHistory, ViewTermComments, EditTermNotes, EditTermContacts, NotifyContacts, Workflow Publish, Workflow Delete	Data Management Stewards
Business Data Network: Business Approver	Provides all the functionality for approving terms	ViewApplication, ViewTermAttributes, ViewTermStatus, ViewTermImportance, ViewTermLinks, ViewTermRelatedTags, ViewTermRelatedTerms, ViewTermHierarchy, ViewTermAssociatedItems, ViewTermNotes, ViewTermContacts, ViewTermHistory, ViewTermComments, EditTermNotes, EditTermContacts, NotifyContacts, Workflow Publish, Workflow Delete	Data Management Business Approvers;
Data Management: Business Data Network	Provides default access to Business Data Network	ViewApplication, ViewTermAttributes, ViewTermStatus, ViewTermImportance, ViewTermLinks, ViewTermRelatedTags, ViewTermRelatedTerms, ViewTermHierarchy, ViewTermAssociatedItems, ViewTermNotes, ViewTermContacts, ViewTermHistory, ViewTermComments, NotifyContacts	Data Management Executives

Define Users and Link Them to Groups (and Roles)

SAS Business Data Network is installed as part of a bundle of products. After installation, an administrator uses SAS Management Console to perform the following tasks:

Create a user definition for each person who uses SAS Business Data Network
Create any custom groups (and roles) that you might require if the default groups provided by SAS Business Data Network do not meet your needs
Assign each user to one or more of the default or custom groups in order to grant each user the capabilities that he or she requires

For more information about defining users and groups in SAS Management Console, see SAS Management Console: Guide to Users and Permissions.