37798 - Creating a SAS® Information Map that filters using identity-driven, group-based, row-level permissions

Sample 37798: Creating a SAS® Information Map that filters using identity-driven, group-based, row-level permissions

Overview

BI row-level permissions enable you to limit access to SAS data and third-party relational data that is accessed through information maps. Row-level permissions are enforced when information maps are accessed from applications such as SAS® Web Report Studio.

This sample shows you how to define a row-level permission filter that is based on group membership using the SAS.IdentityGroups property. This filtering method can be useful when you need to subset results based on metadata group memberships for a user. As the input table for the information map, this sample uses the SASHELP.PRDSALE table.

About the Sample Users and Groups

For this sample, these users and group memberships are defined in metadata.

User	Group Membership
Sales Rep East	EAST
Sales Rep West	WEST
Sales Manager	EAST, WEST

Create the Filter

In SAS Information Map Studio, the PRDSALE table has already been used to create an information map named Sales 2008 Map.

Here are the steps to create the filter:

Select Insert ► Filter to open the New Filter dialog box.
Name the filter, select the data item that you want to filter, select Is equal to for the condition, and then select the SAS.IdentityGroups property. After you have defined your filter, click OK. In this sample, the data item is REGION.
Note: The value of your data item must match the name of the metadata group created in SAS Management Console.

Note: The filter interface will show the property values for the user that is currently logged in. In this example, the Sales Rep for the eastern Region is logged into SAS Information Map Studio. Therefore, the value displayed for SAS.IdentityGroups is EAST.
Open the information map properties.
Define your filter as a general prefilter.
Save your information map.

View the Results

To see the results of testing this filter in SAS Web Report Studio, click the Results tab at the top of this sample.

Additional Documentation

For more information about creating row-level permissions, see the SAS 9.4 Guide to BI Row-Level Permissions.

For more information about SAS Information Map Studio, see the SAS Information Map Studio documentation page.

These sample files and code examples are provided by SAS Institute Inc. "as is" without warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability and fitness for a particular purpose. Recipients acknowledge and agree that SAS Institute shall not be liable for any damages whatsoever arising out of their use of this material. In addition, SAS Institute will provide no support for the materials contained herein.

Date Modified:	2009-11-12 17:00:02
Date Created:	2009-11-11 14:44:41

Product Family	Product	Host	Product Release		SAS Release
Product Family	Product	Host	Starting	Ending	Starting	Ending
SAS System	SAS Web Report Studio	z/OS	4.2		9.2 TS2M0
		Microsoft® Windows® for x64	4.2		9.2 TS2M0
		Microsoft Windows Server 2003 Datacenter Edition	4.2		9.2 TS2M0
		Microsoft Windows Server 2003 Enterprise Edition	4.2		9.2 TS2M0
		Microsoft Windows Server 2003 Standard Edition	4.2		9.2 TS2M0
		Microsoft Windows XP Professional	4.2		9.2 TS2M0
		Windows Vista	4.2		9.2 TS2M0
		64-bit Enabled AIX	4.2		9.2 TS2M0
		64-bit Enabled Solaris	4.2		9.2 TS2M0
		HP-UX IPF	4.2		9.2 TS2M0
		Linux for x64	4.2		9.2 TS2M0
		Solaris for x64	4.2		9.2 TS2M0

Support