When a metadata object, such as an OLAP cube, is explicitly denied access for the PUBLIC or SASUSERS groups, a side-effect of that denial is that the SAS System Services group will have the same denial pattern.

After you add a broad denial, review the impact that this action has on every other group. For example, if the only setting on an item is an explicit PUBLIC denial, that denial blocks access for every user other than unrestricted users. To ensure that your SAS OLAP cube can be accessed correctly, add an explicit grant to the SAS System Services group for the ReadMetadata permission.

This behavior is expected in both SAS^® 9.1 and SAS 9.2. The behavior for SAS 9.2 is documented in the SAS 9.2 Intelligence Platform: Security Administration Guide.

Operating System and Release Information