Roles and Capabilities

About Roles and Capabilities

A role manages the availability of application features such as menu items and plug-ins. An application feature that is under role-based management is called a capability.
Certain actions are available only to users or groups that have a particular role. Any user or group who is a member of a role has all of that role’s capabilities.
Roles can contribute to one another. A role automatically includes all of the capabilities of a role that contributes to it.
Roles differ from permissions. In general, roles do not affect access to metadata or data.

Predefined Roles and Capabilities for SAS Decision Manager

Your installation includes several predefined roles for administrators and users of SAS Decision Manager. Depending on what software you have installed, you might have other predefined roles.
Note: The ability to access and update metadata is subject to permissions that are placed on that metadata. These roles do not affect permissions.
Predefined User Roles and Capabilities
Role
Description
Decision Manager Common: Administration
Enables users to perform all Decision Manager Common tasks, including administering workflows.
This role is assigned to the group Decision Manager Common Administrators and has the Decision Manager Common: Workflow category capability.
Business Rules Manager: All Capabilities
Enables users to create, edit, and delete all business rules content, including vocabularies, entities, terms, lookup tables, rule sets, and rule flows.
Business Rules Manager: Rule Flow and Rule Set Designer
Enables users to create, edit, and delete rule sets and rule flows.
Business Rules Manager: Rule Flow and Rule Set Read-Only
Enables users to view rule sets and rule flows.
Business Rules Manager: Vocabulary and Lookup Designer
Enables users to create, edit, and delete vocabularies, entities, terms, and lookup tables.
Business Rules Manager: Vocabulary and Lookup Read-Only
Enables users to view vocabularies, entities, terms, and lookup tables.
Model Manager: Administration Usage
Enables users to perform all model management tasks. For specific user tasks that can be performed, see Model Management User Tasks.
This role is assigned to the group Model Manager Administrator Users and has the following Model Manager Plug-in capabilities by default:
  • Model Projects category
  • Model Portfolios category
Model Manager: Advanced Usage
Enables users to perform all model management tasks except for tasks that can be performed only by an application administrator. For specific user tasks that can be performed, see Model Management User Tasks.
This role is assigned to the group Model Manager Advanced Users and has the following Model Manager Plug-in capabilities by default:
  • Model Projects category
  • Model Portfolios category
Model Manager: Usage
Enables users to perform general model management tasks, such as viewing project and model information. For specific user tasks that can be performed, see Model Management User Tasks.
This role is assigned to the group Model Manager Users and has the following Model Manager Plug-in capabilities by default:
  • Model Projects category
Comments: Administrator
Enables users to edit or delete comments.
The ability to edit and delete comments is controlled by the capabilities under Applicationsthen selectSAS Application Infrastructurethen selectComments in SAS Management Console.
Data Management: Lineage
Provides default access to the SAS Lineage application. This role is predefined, but it is not automatically added to the Decision Manager Users group. To enable SAS Decision Manager users to access SAS Lineage, add the Data Management: Lineage role to the Decision Manager Users group. See Adjust Group or Role Membership in SAS Management Console: Guide to Users and Permissions for instructions.
Decision Builder User
Enables users to read, create, edit, delete, and publish decisions in Decision Builder.
Note: This role is predefined when you install a new deployment or migrate to SAS Decision Manager 3.1. If you upgrade to SAS Decision Manager 3.1, you must create this role. See Create the Decision Builder User Role for more information.
Management Console: Advanced
Provides access to all plug-ins in SAS Management Console.
This role is assigned to the group SAS Administrators.
Metadata Server: Operation
Supports adding metadata repositories and operating the metadata server.
This role is assigned to the group SAS Administrators.
Metadata Server: User Administration
Supports management of users, groups, and roles other than the unrestricted users role.
This role is assigned to the group SAS Administrators.
Metadata Server: Unrestricted
Provides all capabilities in SAS Management Console and provides access to all metadata.
This role is assigned to the group SAS Administrator Users.
Visual Analytics: Data Building
Enables users to access SAS Visual Data Builder. This role is predefined, but it is not automatically added to the Decision Manager Users group. To enable SAS Decision Manager users to access SAS Visual Data Builder, add the Visual Analytics: Data Building role to the Decision Manager Users group. See Adjust Group or Role Membership in SAS Management Console: Guide to Users and Permissions for instructions.
Last updated: February 22, 2017