topic Limiting access to CAS data underlying VA reports in SAS Viya

Limiting access to CAS data underlying VA reports

mpg — Mon, 18 Feb 2019 17:49:38 GMT

Hello,

I'm hoping someone might advise whether it's possible to meet a particular authorization need for our Viya implementation. What I want to be able to do is enforce that a report viewer not be able to use the data underlying a report outside the context of viewing the report. For example, Sally is a company employee who should be able to view a company-wide Employee Counts by Department report, which aggregates the underlying data to avoid showing sensitive information. As such, she belongs to a Company Report Viewers group that has access to the Report Viewer application and read permissions for the Company caslib. However, she also creates Sales Department reports and has membership in a Sales Report Authors group, which grants her access to the Visual Analytics application and edit permissions to the Sales caslib. It appears that Sally's access to the VA application and the Company caslib would allow her to create her own reports using the underlying sensitive Company caslib data. The desire is to prevent Sally from using the Company data outside the context of viewing company-wide reports.

Thanks in advance for sharing your thoughts!

Re: Limiting access to CAS data underlying VA reports

BeNur — Fri, 10 May 2019 17:31:55 GMT

Hi @mpg ,

I believe you can configure this using SAS Viya Rules feature in Environment manager

more details here:

https://blogs.sas.com/content/sgf/2017/06/29/new-rules-for-authorization-in-sas-viya/

Re: Limiting access to CAS data underlying VA reports

mpg — Mon, 13 May 2019 12:27:54 GMT

Thanks for the suggestion. I can use the Rules interface to allow/disallow access to the VA application. What I'm hoping to accomplish is more granular - to specify that a user/group can use a particular dataset for report viewing (in Report Viewer) but not for report creation (in Visual Analytics).

Re: Limiting access to CAS data underlying VA reports

34reqrwe — Tue, 28 May 2019 01:49:34 GMT

As far as I know, you can't can achieve this . But would be interested to find out if anybody has a way.