Instead
of setting permissions on every individual object, use inherited settings.
This approach reduces the number of access controls that you have
to manage. For example, rather than adding explicit settings or ACTs
to every report, you can set permissions on a folder that contains
reports for which those permissions are appropriate.
To learn more, complete
this exercise in SAS Management Console:
-
-
On the
Folders tab,
right-click your
My Folder ![my folder icon](images/myfolder.png)
and select
New
Folder. Create a new folder
named
parent
.
-
Right-click the parent
folder
and create another folder named child
.
-
Right-click the
child
folder
and select
Properties. On the
Authorization tab,
select
SASUSERS. Notice that this group has
an indirect
![grey check box](images/cb_gray1.png)
denial of the Read permission. Click
Cancel.
-
Right-click the
parent
folder
and select
Properties. On the
Authorization tab,
select
SASUSERS, add an explicit
![white check box](images/cb_white1.png)
grant of Read permission, and click
OK.
-
Right-click the
child
folder
and select
Properties. On the
Authorization tab,
select
SASUSERS. Notice that this group now
has an inherited
![grey check box](images/cb_gray1.png)
grant of Read permission.
-
On the
child
folder's
Authorization tab,
add an explicit
![white check box](images/cb_white1.png)
grant of Read permission on top of the inherited
![grey check box](images/cb_gray1.png)
grant of Read permission, and click
OK.
This ensures that Read access for SASUSERS is preserved even if the
setting on the
parent
folder changes.
-
To verify that the explicit
setting on the
child
folder is preserved,
change the
parent
folder setting for
SASUSERS to an explicit
![white check box](images/cb_white1.png)
denial of Read permission, and then check the
child
folder
settings again. For SASUSERS, the explicit
![white check box](images/cb_white1.png)
grant of Read permission is still there. The denial
on the
parent
folder is not relevant
for the
child
folder because there
is an explicit setting on the
child
folder.
-
To clean up, right-click
the parent
folder and select Delete.