You can create a custom role that grants access to only a particular plug-in within SAS^® Management Console and then assign that role to users. However, those users might still have access to other plug-ins than the one specified for that custom role.

This behavior occurs because the implicit SASUSERS and PUBLIC groups are assigned certain pre–defined roles by default. All users defined in the SAS^® Metadata Repository will inherit the capabilities assigned to these groups. Since capabilities cannot be denied, they can only be granted, all users will always have the capabilities assigned via these groups' role membership.

SAS does not recommend that you modify the pre-defined roles that ship with the software. Instead of editing the existing pre-defined roles, you should remove the default role membership from SASUSERS, PUBLIC, or both. However, removing these roles does impact all users. If you have certain standard capabilities that you want all users to inherit, then you can create new custom roles and assign them to SASUSERS and PUBLIC.

Operating System and Release Information