Sample 37798: Creating a SAS® Information Map that filters using identity-driven, group-based, row-level permissions
Overview
BI row-level permissions enable you to limit access to SAS data and third-party relational data that is accessed through information maps. Row-level permissions are enforced when information maps are accessed from applications such as SAS® Web Report Studio.
This sample shows you how to define a row-level permission filter that is based on group membership using the SAS.IdentityGroups property. This filtering method can be useful when you need to subset results based on metadata group memberships for a user. As the input table for the information map, this sample uses the SASHELP.PRDSALE table.
About the Sample Users and Groups
For this sample, these users and group memberships are defined in metadata.
User |
Group Membership |
Sales Rep East |
EAST |
Sales Rep West |
WEST |
Sales Manager |
EAST, WEST |
Create the Filter
In SAS Information Map Studio, the PRDSALE table has already been used to create an information map named Sales 2008 Map.
Here are the steps to create the filter:
- Select Insert ► Filter to open the New Filter dialog box.
- Name the filter, select the data item that you want to filter, select Is equal to for the condition, and then select the SAS.IdentityGroups property. After you have defined your filter, click OK. In this sample, the data item is REGION.
Note: The value of your data item must match the name of the metadata group created in SAS Management Console.
Note: The filter interface will show the property values for the user that is currently logged in. In this example, the Sales Rep for the eastern Region is logged into SAS Information Map Studio. Therefore, the value displayed for SAS.IdentityGroups is EAST.
- Open the information map properties.
- Define your filter as a general prefilter.
- Save your information map.
View the Results
To see the results of testing this filter in SAS Web Report Studio, click the Results tab at the top of this sample.
Additional Documentation
For more information about creating row-level permissions, see the SAS 9.4 Guide to BI Row-Level Permissions.
For more information about SAS Information Map Studio, see the SAS Information Map Studio documentation page.
These sample files and code examples are provided by SAS Institute
Inc. "as is" without warranty of any kind, either express or implied, including
but not limited to the implied warranties of merchantability and fitness for a
particular purpose. Recipients acknowledge and agree that SAS Institute shall
not be liable for any damages whatsoever arising out of their use of this material.
In addition, SAS Institute will provide no support for the materials contained herein.
These sample files and code examples are provided by SAS Institute
Inc. "as is" without warranty of any kind, either express or implied, including
but not limited to the implied warranties of merchantability and fitness for a
particular purpose. Recipients acknowledge and agree that SAS Institute shall
not be liable for any damages whatsoever arising out of their use of this material.
In addition, SAS Institute will provide no support for the materials contained herein.
Results
When testing the results of applying this filter, notice that only records where Region=EAST are displayed. This is because the East Region Sales Rep is currently logged in.
If the Sales Manager logs in, then sales from both the EAST and the WEST regions are visible because the Sales Manager is a member of both metadata groups.
This sample shows you how to define a row-level permission filter that is based on group membership using the SAS.IdentityGroups property. This filtering method can be useful when you need to subset results based on metadata group memberships for a user.
Date Modified: | 2009-11-12 17:00:02 |
Date Created: | 2009-11-11 14:44:41 |
Operating System and Release Information
SAS System | SAS Web Report Studio | z/OS | 4.2 | | 9.2 TS2M0 | |
Microsoft® Windows® for x64 | 4.2 | | 9.2 TS2M0 | |
Microsoft Windows Server 2003 Datacenter Edition | 4.2 | | 9.2 TS2M0 | |
Microsoft Windows Server 2003 Enterprise Edition | 4.2 | | 9.2 TS2M0 | |
Microsoft Windows Server 2003 Standard Edition | 4.2 | | 9.2 TS2M0 | |
Microsoft Windows XP Professional | 4.2 | | 9.2 TS2M0 | |
Windows Vista | 4.2 | | 9.2 TS2M0 | |
64-bit Enabled AIX | 4.2 | | 9.2 TS2M0 | |
64-bit Enabled Solaris | 4.2 | | 9.2 TS2M0 | |
HP-UX IPF | 4.2 | | 9.2 TS2M0 | |
Linux for x64 | 4.2 | | 9.2 TS2M0 | |
Solaris for x64 | 4.2 | | 9.2 TS2M0 | |