topic Re: Public access has been denied in SAS Visual Analytics

Public access has been denied

dirks — Wed, 31 Aug 2016 12:45:38 GMT

I get this error message when I try to log in to VA:

Public access has been denied.

Public users are not allowed to access this SAP application. The current user has been signed out.

Logging in with my admin account works.

Can anyone help me please?

Re: Public access has been denied

Kurt_Bremser — Wed, 31 Aug 2016 13:06:09 GMT

You need a userid that is specified in SAS metadata. This puts it (automatically) in the group SASUSERS. All other userid's are automatically assigned to group PUBLIC, which has very low privileges.

Re: Public access has been denied

dirks — Wed, 31 Aug 2016 13:10:51 GMT

Thanks, but where do I do that? I have a user in SAS which I use for DIS, EPG etc.

*edit* I just checked, apparently I am in the SASUSER Group as well as in PUBLIC.

I m also in SAS Administrators and SAS System Services.

Re: Public access has been denied

SASKiwi — Wed, 31 Aug 2016 20:04:56 GMT

You also need a SAS VA specific role added to your user account otherwise you wont be able to get in. Check these out in SMC:

Re: Public access has been denied

dirks — Thu, 01 Sep 2016 06:48:31 GMT

I have put myself into every Visual Analytics group, just to get it to work. Still I am not able to log in.

Re: Public access has been denied

PaulHomes — Thu, 01 Sep 2016 10:27:50 GMT

You may also want to consider that authentication for VA on the mid-tier may be configured differently to the authentication that is being done for the desktop clients like DI Studio etc. For example VA could be configured for trusted web authentication and the format of the fully qualified userid that is being used to query metadata for your identity when logging into VA may be different to the one that is being found when you are using DI. That can result in a (denied by default) PUBLIC-only user for you when using VA.

I would approach this by finding a user for which a VA login works then, in SAS Management Console User Manager, compare the configuration of that user with yourself. Looking on the accounts tab for that user do they have a single login listed or multiple? Is one in DefaultAuth and another in Web? Does this match the setup for your own user? Are the userids in the same format?

Re: Public access has been denied

PaulHomes — Thu, 01 Sep 2016 10:35:25 GMT

BTW you shouldn't need to be in the SAS System Services group. That's a group for the SAS Trusted User service account to get broad read access to metadata. You will already get that (and more) from your membership of the SAS Administrators group.

Re: Public access has been denied

dirks — Thu, 01 Sep 2016 12:27:25 GMT

PaulHomes wrote:
I would approach this by finding a user for which a VA login works then, in SAS Management Console User Manager, compare the configuration of that user with yourself. Looking on the accounts tab for that user do they have a single login listed or multiple? Is one in DefaultAuth and another in Web? Does this match the setup for your own user? Are the userids in the same format?

I have one user that works. I ve put myself in exactly the same groups.

The account has only one login listed. It is DefaultAuth, same as mine. It matches mine. Both have the same format.

Re: Public access has been denied

dirks — Thu, 01 Sep 2016 12:29:47 GMT

@PaulHomes wrote:
BTW you shouldn't need to be in the SAS System Services group. That's a group for the SAS Trusted User service account to get broad read access to metadata. You will already get that (and more) from your membership of the SAS Administrators group.

I can't remove myself from the SAS System Services group. I get the error that the group is inherited.

Re: Public access has been denied

PaulHomes — Thu, 01 Sep 2016 21:15:44 GMT

That sounds like the message you get when you try to remove an inherited access control from the Authorization tab. Are you trying to remove SAS System Services from the Authorization tab of your user? To remove yourself from the SAS System Services group remove it from the right hand list on the Groups and Roles tab for your user identity instead.

Re: Public access has been denied

PaulHomes — Thu, 01 Sep 2016 21:20:26 GMT

In that case I would start tracing things through the log files looking in the SAS Metadata Server log file and the various mid-tier log files. I would suggest that it might be a good idea to contact SAS Technical Support for this issue.

Re: Public access has been denied

dirks — Fri, 02 Sep 2016 06:31:50 GMT

I will do that. Thanks for you help Paul!