Add an Explicit Grant or Denial

To add an explicit grant or denial to a table or a folder:
  1. Log on to SAS Visual Analytics Administrator, and expand the navigation pane for folders.
  2. In the folder tree within the navigation pane, locate the table that you want to protect or make available.
  3. Right-click the table or folder, and select Authorization.
    The authorization properties are displayed.
  4. On the Authorization page, locate the user or group that you want to assign an explicit control to. If the user or group is not listed, click the plus icon to open the Add Identities window.
    Note: An explicit grant of the ReadMetadata permission is automatically set for each identity that you add.
  5. Click a cell and make a selection from the drop-down list.
    Note: If the selected identity is an unrestricted user, all permissions are granted and you cannot' make changes.
    Note: When you click outside the cell, a yellow star explicit indicator (indicating an explicit control) is displayed in the cell that you updated.
  6. If you changed a group's access, review the impact on all of the listed identities.
    Note: This is important because controls that you add for a group can affect access for all members of that group. For example, an explicit denial that you add for the PUBLIC group blocks access for all restricted users, unless there are also explicit (or direct ACT) grants. You must offset a broad explicit denial with explicit (or direct ACT) grants for any restricted identities whose access you want to preserve.
    The effective permissions are updated immediately when the group permissions are modified.
  7. Save the table.
    Note: The effective permissions are updated immediately when the group permissions are modified.
Tip
To apply or remove access control templates (ACTs), use SAS Management Console.