topic Re: Viya 3.5 - deny access to SAS Environment Manager web app in Administration and Deployment

Viya 3.5 - deny access to SAS Environment Manager web app

EyalGonen — Mon, 27 Nov 2023 12:50:08 GMT

Hi experts,

I want to deny access to SAS Environment Manager to all non SAS Admin users. Looking at the Viya 3.5 doc I see there is this URI resource:

SASEnvironmentManager/

And there are also other more specific URI resources like:

/SASEnvironmentManager/data

So my question is whether it is sufficient to close access to SASEnvironmentManager/ or do I need to also close access for each sub-resource such as /SASEnvironmentManager/data and /SASEnvironmentManager/dashboard etc.

Thanks

Re: Viya 3.5 - deny access to SAS Environment Manager web app

gwootton — Mon, 27 Nov 2023 15:10:19 GMT

I think the easiest way to do this would be to search for /SASEnvironmentManager in the rules page and disable all the rules listed for Authenticated Users.

Re: Viya 3.5 - deny access to SAS Environment Manager web app

EyalGonen — Tue, 28 Nov 2023 10:09:43 GMT

Thanks Greg. Would it be enough to disable just the rule for the /SASEnvironmentManager/ URI without disabling the other rules that are page specific?

Re: Viya 3.5 - deny access to SAS Environment Manager web app

gwootton — Tue, 28 Nov 2023 14:42:22 GMT

It would probably have the desired effect but with some strange behavior if they tried to access one of those specific endpoints by entering them in the browser URL, where the application couldn't fully load instead of just rejecting access.