topic Re: Determine the current user in Visual Analytics in SAS Visual Analytics

Determine the current user in Visual Analytics

Koenigpe — Tue, 28 Oct 2014 09:31:30 GMT

Hi,

I´m currently checking the Row-level Security for LASR Tables (SAS(R) Visual Analytics 6.1: User's Guide).

Is it posible determine the current user in SAS VA to use it as part of the Row-Level Permission Conditions. Something like &SYSUSERID in SAS Macro. I would like to build a condition like <responsible= "&SYSUSERID"> on the column "responsible" in the sas va dataset .

This would be an easy way to build a filter depending on the current user without setting the permissions on the table for each user.

Kind Regards,

Peter

Re: Determine the current user in Visual Analytics

MichelleHomes — Tue, 28 Oct 2014 10:07:09 GMT

Hi Peter,

I am not sure you can use SAS macro variables to dynamically assign the row-level permission conditions. Perhaps instead of having the condition based on a user identity, using a group identity might help. I wrote a blog post about how to set this up and how you can see the underlying ACE permission condition XML at Conditional Grants in SAS Visual Analytics

In SAS Visual Analytics 7.1 there is a new parameters tab to set up global parameters in filters, calculated items, and aggregated measures more for the GUI rather than being used on the underlying LASR table SAS(R) Visual Analytics 7.1: User's Guide - Parameters

Kind Regards,

Michelle

Re: Determine the current user in Visual Analytics

Allan_dk — Thu, 30 Oct 2014 09:10:43 GMT

In VA 6.1 you can write expressions like this

("rbs-"|| departmentname) IN ("SUB::SAS.IdentityGroups") OR "rbs-FullAccess" IN ("SUB::SAS.IdentityGroups")

If the user is member of the group "rbs-Sales" then they will have access to all rows where departmentname = 'Sales'.

I have a extra condition that allows users in the group 'rbs-FullAccess' to read all data.

There are other identity driven properties like SAS.Userid SAS.Personname, SAS.IdentityName that you can use.

BTW:

In VA 6.2 and 6.3 (and maybe even later versions) SAS have removed the option to write expression, and replaced the editor with a drag-and-drop editor, and you can not use identity driven properties.

There is a workaround.

You can activate the old editor on a table with a command like this

./sas-set-metadata-access -host servername -port 8561 -user USERNAME -password PASSWORD "Analytical LASR Data - Sandbox/SALES(Table)" -grant "SalesUsers":Read -condition '("rbs-"|| departmentname) IN ("SUB::SAS.IdentityGroups") OR "rbs-FullAccess" IN ("SUB::SAS.IdentityGroups")'

Re: Determine the current user in Visual Analytics

Koenigpe — Thu, 30 Oct 2014 10:22:43 GMT

Sounds promising! Thanks.

I will check solution.

Re: Determine the current user in Visual Analytics

MichelleHomes — Wed, 14 Jan 2015 07:27:33 GMT

Hi,

How did you go with this? Do you require further assistance? Please mark question as answered correctly or helpful so that others know who may come across this in future.

Thanks,

Michelle

Re: Determine the current user in Visual Analytics

SamirC_B_ — Fri, 24 Apr 2015 09:34:27 GMT

Thank you, Allan.

Very useful information, it helped me a lot in my implementation.

Re: Determine the current user in Visual Analytics

pratikjageera — Fri, 26 Feb 2016 02:51:35 GMT

Hi Allan_dk ,

How can I see what values do the variables SAS.Userid SAS.Personname, SAS.IdentityName hold , so that I can compare it with specific columns in my dataset.

I am applying row level security on dataset based on the logged in user.

Re: Determine the current user in Visual Analytics

pratikjageera — Wed, 25 May 2016 05:05:25 GMT

Hi Michelle ,

How can I see what values do the variables SAS.Userid SAS.Personname, SAS.IdentityName hold , so that I can compare it with specific columns in my dataset.

I am applying row level security on dataset based on the logged in user.

Pratik