How to I create a custom Identity-Based Substitution Variable in SAS Viya

sb_sas — Mon, 27 Jul 2020 15:00:46 GMT

Hello, I am new to SAS as well as SAS Viya. I am in the process of trying to add row-level security for a group of users. (SAS Viya

Scenario:

I have 50 different users within a group, and this group has access to a caslib that consists of 50 tables (within db).

I am trying to take advantage of the substitution variables within SAS, however, I need a variable called state_cd. (each user has access to 1 to many state_cds)

Question: Is it possible to create a metadata table with the needed data and utilize it to create a dynamic Identity Based Substitution filter?

Similar to this:

FacilityRegion In ('SUB::SAS.IdentityGroups')

(but instead of SAS.IdentityGroups, change it to METADATA_TBL.StateCd)

Below is a link to the sas documentation.

https://go.documentation.sas.com/?cdcId=calcdc&cdcVersion=3.4&docsetId=calauthzcas&docsetTarget=n1bf0cwn6ae85gn1b64x2j0czu24.htm&locale=en#p0typu0legb624n139nqaw1p19pt

Re: How to I create a custom Identity-Based Substitution Variable in SAS Viya

gwootton — Tue, 28 Jul 2020 13:37:34 GMT

The only identity values available are SAS.IdentityGroups and SAS.Userid, so your table would need to include one of these values for row-level security. So if the table includes StateCd as your filtering value you would need a group for each StateCd, and grant memberships to those groups accordingly, then use SAS.IdentityGroups as the filter.

topic Re: How to I create a custom Identity-Based Substitution Variable in SAS Viya in Administration and Deployment

How to I create a custom Identity-Based Substitution Variable in SAS Viya

Re: How to I create a custom Identity-Based Substitution Variable in SAS Viya