Access to SAS Mobile BI :: SAS® Visual Analytics 7.4: Administration Guide

About Mobile Device Management

Here are the key points:

To manage device access to SAS Mobile BI, select ToolsManage Devices from the main menu in the administrator. You can manage devices either by exclusion or by inclusion.
- If you manage by exclusion, all devices can use SAS Mobile BI, except those that are on the blacklist.
- If you manage by inclusion, only devices that are on the whitelist can use SAS Mobile BI.
A deployment enforces only one list (either the blacklist or the whitelist). In a new deployment the blacklist is enforced, so there are no device-level barriers to participation.
You can modify both lists. Making changes to a list that is not currently enforced can help accommodate a future change.
These lists affect devices, not users. To manage what a particular user can see or do, use permissions and capabilities.

How to Manage Mobile Devices

Blacklist a Device

Note: These instructions have an effect only if the blacklist is enforced.

To prevent a mobile device from using SAS Mobile BI:

In the main menu bar, select ToolsManage Devices.
On the Mobile Devices tab, select the Blacklist tab.
At the right edge of the tab, click .
In the Add Device To Blacklist window, enter the ID of the device that you want to exclude from using SAS Mobile BI. (Or, to add multiple device IDs, click Add List.) Click OK.

Note: The information that you supply is not validated by the software.

Tip

For a device that has already connected (or attempted to connect), you can initiate this task from the Logon History tab. Select the device, right-click, and select Add to Blacklist.

To remove a device from the blacklist, select it on the Blacklist tab, right-click, and select Move to Whitelist.

Whitelist a Device

Note: These instructions have an effect only if the whitelist is enforced.

To enable a mobile device to use SAS Mobile BI:

In the main menu bar, select ToolsManage Devices.
On the Mobile Devices tab, select the Whitelist tab.
At the right edge of the tab, click .
In the Add Device To Whitelist window, enter the ID of the device that you want to enable to use SAS Mobile BI. (Or, to add multiple device IDs, click Add List.) Click OK.

Note: The information that you supply is not validated by the software.

Tip

For a device that has already connected (or attempted to connect), you can initiate this task from the Logon History tab. Select the device, right-click, and select Add to Whitelist.

To remove a device from the whitelist, select it on the Whitelist tab, right-click, and select Move to Blacklist.

Determine Which List Is Enforced

In the toolbar at the top of the Mobile Devices tab, the Enforced drop-down list indicates which list is enforced.

In addition, text at the top of either the Blacklist tab or the Whitelist tab indicates the list that is not currently enforced.

Tip

You can also verify the current configuration in SAS Management Console. The blacklist is enforced unless the viewerservices.enable.whitelist.support property is set to true. See viewerservices.enable.whitelist.support.

Determine When a Device Was Blacklisted

Here is one way to determine when a device was blacklisted:

On the Blacklist tab, right-click on the device, and select Copy Device ID.
On the Management History tab, select Device ID from the Filter drop-down list.
Click in the text field, and enter Ctrl+V from the keyboard. (You cannot perform the paste action from the pop-up menu.)
Click Apply.

Tip

You can also copy a device ID from the Whitelist tab. You can also paste a device ID into the Device ID filter on the Logon History tab.

Change How Devices Are Managed

CAUTION:

These are deployment-level instructions that affect all access to SAS Mobile BI.

To switch from enforcing one list to enforcing the other:

Select ToolsManage Devices from the main menu.
Verify that the list that you intend to enforce is appropriately populated.
- If you enforce the whitelist, the whitelist should contain all eligible devices. The blacklist is ignored.
- If you enforce the blacklist, the blacklist should contain all excluded devices. The whitelist is ignored.
In the toolbar at the top of the Mobile Devices tab, make a selection from the Enforced drop-down list. In the confirmation window, click Yes.

About the Mobile Devices Tab

Here are some details about the Mobile Devices tab:

On the History tabs, you can filter by selecting an item from a Filter drop-down list, specifying a value, and clicking Apply.
The Logon History tab displays logon events. By default, only one logon event for each device is displayed. To view previous logon events, select the Include device history check box. The following occurrences are logon events:
- A connection attempt that comes from a new source (a unique combination of device ID and user ID).
- A connection attempt that is accompanied by a device change (such as a new operating system version or application version).
On the Logon History tab, the Status column provides information about a logon event. The Status column does not indicate the current status of a device connection.
When you right-click on a device on the Logon History tab, remember that only one list is in use. Adding a device to the list that is not in use has no immediate effect. For example, if your deployment uses the blacklist, adding a device to the whitelist has no immediate effect.
On the Blacklist and Whitelist tabs, each cell in the User ID column contains the user ID that connected (or attempted to connect) to SAS Mobile BI from the associated device. The user ID is provided for the purpose of helping you identify a device. If no user has attempted to connect from a particular device, no user ID is listed for that device. If multiple users have attempted to connect from a particular device, all of those user IDs are listed.
On the Manage tabs, you can right-click on a device ID, and select Copy Device ID. On the History tabs, you can paste a device ID into the text field next to the Filter drop-down list.

Note: A device ID is a unique identifier (usually a hardware device number) that is determined and communicated by the connecting mobile application.
The Management History tab displays device management events, such as adding a device to a list or removing a device from a list. The Admin ID column provides the user ID of the administrator who performed each action.
When you right-click on a device in the blacklist or whitelist, you can choose either a move action or a remove action. In terms of immediate effect, there is no difference between these two actions.

Note: Authentication from SAS Office Analytics to SAS Visual Analytics does not use the SAS Visual Analytics Transport Service. For this reason, actions and information about the Mobile Devices tab in the administrator have no impact on SAS Enterprise Guide, SAS Add-in for Microsoft Office, and SAS Web Parts for SharePoint.

Protections for Mobile Content

In addition to the blacklist and whitelist functionality, protections that are specific to mobile content include the following:

To prevent offline access to mobile data, assign users or groups to a role that has the Purge Mobile Report Data capability. See Purge Mobile Report Data.
To limit offline access to mobile data, assign users or groups to a role that has the Limit Duration of Offline Access capability.See Limit Duration of Offline Access.
To require knowledge of an application passcode, assign users or groups to a role that has the Require Passcode on Mobile Devices capability. See Require Passcode On Mobile Devices.
Content on a mobile device is encrypted by the device’s operating system. For information about encrypted communication for mobile devices, see the SAS Intelligence Platform: Middle-Tier Administration Guide.