Groups and Group Membership

About Groups

A group is a set of users. Groups enable you to grant multiple users membership in a role or permissions to metadata, thus simplifying security administration. You can create as many groups as are needed in order to manage your installation.
Tip
A group's membership can include other groups as well as individual users. This enables you to create a nested group structure.

Predefined User Groups in SAS Decision Manager

Predefined User Groups
Group
Description
Public
This group includes everyone who can access the metadata server, either directly or through a trust relationship. If a user is able to log on to a client application but does not have an individual SAS identity, the user is assumed to be in the public group. Because this group has implicit membership, you cannot explicitly add or remove users from this group.
SAS Users
This group includes everyone who can access the metadata server, either directly or through a trust relationship. If a user is able to log on to a client application but does not have an individual SAS identity, the user is assumed to be in the public group. Because this group has implicit membership, you cannot explicitly add or remove users from this group.
SAS Administrators
This is a standard group for metadata administrators. In a standard configuration, members are granted broad access and administrative capabilities, but are not unrestricted.
Decision Manager Common Administrators
This group has administrative permissions. Membership in this group is required to administer workflows.
In your initial installation, this group is a member of the following roles:
  • Decision Manager Common: Administration
  • Business Rules Manager: All Capabilities
  • Model Manager: Administration Usage
  • Decision Builder User (through the Decision Manager Users group)
Decision Manager Users
This group is created during the installation process. Members of this group have permission to read, add, or delete table summary information in the Data category.
This group is a member of the Decision Builder User role, so members of this group have permission to read, create, update, delete, run, and publish a decision.
During configuration, this group was associated with an identity that enables members to access the database during rule flow and table summary execution.
Note: This group is the only group that is granted permission to publish business rules content to the SAS Content Server by default.
Note: Unless you make configuration changes, users who do not have administrator permission must be members of this group. If you want these users to be members of a different group, you must grant the group permissions that enable members to do the following:
  • access the database (using the necessary identity)
  • publish content to the folders for SAS Decision Manager on the SAS Content Server
Model Manager Administrator Users
This group has administrative permissions in the Projects and Portfolio categories.
For specific user tasks that can be performed, see Model Management User Tasks.
Model Manager Advanced Users
This group has permissions to read, write, and delete content in the Projects and Portfolios categories.
For specific user tasks that can be performed, see Model Management User Tasks.
Model Manager Users
This group has permission to read content in the Projects category.
For specific user tasks that can be performed, see Model Management User Tasks.
SAS System Services
This group enables members to export files on the Folders tab of SAS Management Console.
Last updated: February 22, 2017