topic Re: SAS Base Library Authorization in SAS Viya

SAS Base Library Authorization

shivrajpawar98 — Fri, 10 Oct 2025 07:23:27 GMT

Hi All,

Can anyone guide me on how to set up Base SAS Library authorization for individual users on SAS Viya 4? I’d really appreciate your help with this.

Regards,
Shivraj Pawar

Re: SAS Base Library Authorization

LinusH — Fri, 10 Oct 2025 06:40:14 GMT

Base libraries uses file system authorizations, so speak to your platform/security team for guidance.

Re: SAS Base Library Authorization

shivrajpawar98 — Fri, 10 Oct 2025 07:13:19 GMT

Sorry i was not clear, i need this authorization on sas viya 4

Re: SAS Base Library Authorization

LinusH — Mon, 13 Oct 2025 11:20:35 GMT

As I understand it, you can set authorizations to libraries inside SAS Viya.

But, this probably won't stop user from accessing the library path directly.

"The data source definitions do not reside in folders and are created with READ permissions for all authenticated users. Operating system permissions to the library physical paths are respected by the Compute server when the libref is assigned. This means that if a user cannot read the file-system directory they will not see the library in their SAS session."

https://communities.sas.com/t5/SAS-Communities-Library/Managing-Connections-to-Data-Sources-and-SAS-Libraries-for/ta-p/825138

Re: SAS Base Library Authorization

gwootton — Mon, 13 Oct 2025 13:02:34 GMT

In the SAS Viya Platform, Base SAS libraries are made available to compute and CAS by way of volume mounts. For example your data might be on an NFS volume nfs.example.com:/sas-data which is mounted to /sas-data inside the CAS and compute pods.

For CAS libraries, permissions can be set on the CASLIB, but if you are mounting directly onto the compute pods, access would be governed based on file system permissions, which are based on the execution user's POSIX attributes (uid, gid, secondary gids).

The POSIX attributes are either provided to Viya (from LDAP or through bulk-loading), or Viya can generate them.

So to limit access to certain data files you would need to set permissions on those paths in the volume you are mounting, based on the user and group identifiers in Viya.

Re: SAS Base Library Authorization

Kurt_Bremser — Mon, 13 Oct 2025 15:30:54 GMT

So Viya does not provide something equivalent to 9.4‘s metadata-bound libraries?

Re: SAS Base Library Authorization

gwootton — Mon, 13 Oct 2025 15:54:07 GMT

@Kurt_Bremser Not for base SAS tables directly as far as I'm aware, though you can still password protect and encrypt them programmatically. CAS tables can be encrypted with a key stored in an encryption domain, and protected with permissions.

Re: SAS Base Library Authorization

Kurt_Bremser — Tue, 14 Oct 2025 09:08:56 GMT

So how does one solve the issue of encrypting data at rest?

Re: SAS Base Library Authorization

gwootton — Tue, 14 Oct 2025 13:25:07 GMT

@Kurt_Bremser using encrypted caslibs and whole disk encryption.

Here is the documentation on Data at Rest encryption on the SAS Viya Platform:
https://go.documentation.sas.com/doc/en/sasadmincdc/v_068/calencryptrest/titlepage.htm