Roles and Capabilities
About Capabilities
Here are the key points about capabilities:
-
Unlike permissions, which affect access to data, content, and metadata, capabilities affect access to features and functionality.
-
Capabilities are assigned to roles. Users get their capabilities through their memberships.
-
You cannot deny a capability to a user. Instead, make sure that user is not a member of any role that provides the capability.
-
If the standard distribution of capabilities is not optimal for your environment, consider creating custom roles. Here are some tips:
-
If you create a specialized administrative role, remember to provide the Manage Environment capability in addition to any specific functional capabilities.
-
If you create a global administrative role, make the Visual Analytics: Administration role a contributing role for the new custom role. In addition, add the Build Data capability to the custom role.
-
Predefined Roles
Here are the predefined
roles for SAS Visual Analytics:
Visual Analytics: Basic
provides functionality for guest access (if applicable) and entry-level users. This
role enables all registered users to view reports in the web viewer. This role does
not
provide commenting or personalization features. See Supporting Guest Access.
Visual Analytics: Report Viewing
provides commenting
and personalization features, in addition to basic functionality.
Visual Analytics: Analysis
provides the ability to create reports and explorations, in addition to report viewing
functionality. If SAS Visual Statistics is licensed, provides the Build Analytical
Model capability.
Visual Analytics: Data Building
provides the ability
to prepare data, in addition to analysis functionality.
Visual Analytics: Administration
provides the ability
to perform tasks in the administrator, in addition to most other capabilities.
|
Capability
|
Basic
|
Report Viewing
|
Analysis
|
Data Building
|
Administration
|
|
|---|---|---|---|---|---|---|
|
Visual Analytics
|
||||||
|
View Report and Stored
Process
|
 |
|
|
|
|
|
|
Create Report
|
|
|
|
|||
|
Explore Data
|
|
|
|
|||
|
Build Custom Graph
|
|
|
|
|||
|
Add and View Comments
|
|
|
|
|
||
|
Export Data
|
|
|
|
|||
|
Export or Print as PDF
|
|
|
|
|
|
|
|
Email
|
|
|
|
|
|
|
|
Personalization
|
|
|
|
|
||
|
Visual Analytics: Self-Service
Import
|
||||||
|
Import and Load Data
|
|
|
|
|||
|
Import Local Files
|
|
|
|
|||
|
Import SAS Data Sets
from a Server
|
|
|
|
|||
|
Import from data-source
|
|
|
|
|||
|
Visual Analytics: Advanced
|
||||||
|
Build Data
|
|
|||||
|
Manage Environment
|
|
|||||
|
Manage Mobile Devices
|
|
|||||
|
Distribute Reports
|
|
|
||||
|
Visual Analytics Transport
Service
|
||||||
|
Purge Mobile Report
Data
|
||||||
|
Require Passcode On
Mobile Devices
|
||||||
|
Limit Duration of Offline
Access
|
||||||
|
Visual Analytics Explorer
|
||||||
|
Refresh Data
|
|
|
|
|||
|
Export as Image
|
|
|
|
|||
|
Export as Report
|
|
|
|
|||
|
Build Analytical Model
|
|
|||||
|
Visual Analytics Admin
|
||||||
|
Manage LASR Analytic
Server
|
|
|||||
|
Monitor LASR Analytic
Server
|
|
|||||
|
Manage Authorization
|
|
|||||
|
Browse HDFS
|
|
|||||
For role membership
information, see Standard Memberships.
To manage roles, see SAS Management Console: Guide to Users and Permissions or SAS Environment Manager Administration: User’s Guide.
See Also
Capability Definitions
Here are descriptions
of the SAS Visual Analytics capabilities:
Visual Analytics
View Report and Stored Process
Access the viewer. View reports and stored process output. (Access to SAS Mobile BI is also affected by device-level constraints. See Access to SAS Mobile BI.)
Create Report
Access the designer.
Create and modify reports.
Explore Data
Access the explorer.
Create and modify explorations. (In some contexts, the explorer is
a separately licensed add-on product.)
Build Custom Graph
Access the graph builder.
Create and modify graph template objects for use in the designer.
Add and View Comments
Add comments, view
comments, and edit your own comments.
Note: In order to delete comments
and edit other users’ comments, you need the capabilities that
are listed under SAS Application Infrastructure
Comments. Consider adding those
capabilities to the Visual Analytics: Administration role
or making any users that need these capabilities members of the Comments:
Administrator role.
Comments. Consider adding those
capabilities to the Visual Analytics: Administration role
or making any users that need these capabilities members of the Comments:
Administrator role.
Export Data
Export data to other
applications.
Export or Print as PDF
Export or print reports
and explorations as PDF files.
Email
Send a link to a report
or exploration via email.
Personalization
Use individualized
features such as setting preferences, accessing recently viewed objects,
and managing favorites.
Visual Analytics: Self-Service Import
Import and Load Data
A prerequisite for
access to self-service import functionality in the designer and the
explorer. See Self-Service Import.
Import Local Files
Import spreadsheets,
delimited files, and SAS data sets from your computer.
Import SAS Data Sets from a Server
Import remote data
sets.
Import from data-source
Import data from a
third-party data source (for example, Import from Oracle).
Visual Analytics: Advanced
Build Data
Access the data builder.
Set advanced load options in the explorer and the designer.
Manage Environment
Access the administrator.
Additional capabilities are required to perform particular tasks.
Manage Mobile Devices
Blacklist or whitelist mobile devices. (The Manage Environment capability is also
required.)
Distribute Reports
Schedule and manage
the distribution of reports.
Visual Analytics Transport Service
Purge Mobile Report Data
Causes cached data in SAS Mobile BI to be purged when reports are closed. For users
who do not have this capability, cached data is retained locally on the mobile device
for use in offline mode. In
previous releases, this capability was named Purge Mobile Report Data.
Note: For unrestricted users, mobile
data is always purged when reports are closed.
Require Passcode On Mobile Devices
Requires users to enter an application passcode on their devices when they use SAS
Mobile BI. For users who do not have this capability, an application passcode is not
required.
Note: Unrestricted users are always
subject to the application passcode requirement.
Limit Duration of Offline Access
Causes a time limit for offline access to be enforced. A user who has this capability
and has been offline for a certain period of time must sign in to SAS Mobile BI to
access any mobile report data. The
time limit is specified in the property viewerservices.offline.limit.days.
Note: For unrestricted users, mobile
data is always purged when reports are closed.
Visual Analytics Explorer
Refresh Data
Refresh data for explorations.
Export as Image
Export images of explorations
to a local machine.
Export as Report
Export explorations
as reports to SAS folders.
Build Analytical Model
Create and modify analytical
models in the explorer using SAS Visual Statistics (a separately licensed
add-on).
Visual Analytics Admin
The Manage Environment capability provides access to the administrator, and is a prerequisite
for all tasks that are
performed in the administrator.
Manage LASR Analytic Server
Access the LASR tabs and the folders tree. For a distributed server, this capability makes a link
to the SAS High-Performance Computing Management Console available from
the Tools menu.
Monitor LASR Analytic Server
Access the Monitor tabs. This capability is applicable to deployments that use a distributed server.
Manage Authorization
Set metadata-layer
permissions.
Browse HDFS
Access the HDFS tab. This capability is applicable to deployments that use co-located HDFS.
Note: For conciseness, version
numbers are omitted in this topic.
Standard Memberships
The following figure depicts selected group and role relationships in the standard membership structure. Here are some details
about the
figure:
-
Containers indicate nested group memberships. For example, the Visual Analytics Data Administrators group is a direct member of the Visual Analytics Users group.
-
Bracketed text indicates role assignments. For example, the SASUSERS group is a direct member of the Visual Analytics: Basic role.
Standard Membership Structure
Copyright © SAS Institute Inc. All Rights Reserved.
Last updated: December 18, 2018