Introduction to Permissions

Permissions that you set on a table’s Authorization page are part of a metadata-based access control system within the SAS Metadata Server.
The following table shows the permissions and explicit grants or denials that are relevant to SAS Visual Analytics, and where you can set them.
Relevant Permissions for SAS Visual Analytics
Permission
(Abbreviation)
Affected Actions
Authorization Manager in SAS Management Console
Authorization Page in SAS Visual Analytics Administrator
ReadMetadata (RM)
View an object or folder.
For example, to see an exploration, report, stored process, table, or folder, you need ReadMetadata permission for that object.
Set permissions for explorations, reports, stored processes, tables or folders.
Set permissions for tables or folders.
Read (R)
Read data.
For example, to see any data within a LASR table, you need the Read Permission for that table.
Set permissions for tables.
Set permissions for tables.
Specify a conditional grant that allows access to specific rows in a LASR table.1
WriteMetadata (WM)
Edit, delete, or set permissions for an object.
To assign a library to a SAS LASR Analytic Server connection, you need WriteMetadata permission for the library.
To delete an object, you also need the WriteMemberMetadata permission for the object’s parent folder.
Set permissions for libraries.
Set explicit grants or denials for objects.
Set permissions for tables.
WriteMemberMetadata (WMM)
Add an object to a folder or delete an object from a folder.
To enable a user to interact with a folder’s contents but not with the folder itself, grant the WriteMemberMetadata permission and deny the WriteMetadata permission.
Set permissions for folders.
Select a folder in the Folders navigation pane next to the Authorization page, and set permissions.
1Row-level security for LASR tables can be assigned only in SAS Visual Analytics Administrator.

See Also

SAS Visual Analytics: Administration Guide