Resctricing a custom user group access to reports.

[syedhisam]

I would like to know high level steps/ strategy to restrict a Custom Group users to particular reports only.

The requirement is to restrict a Department/custom user group  to access  only reports related to their Business Unit but should not have access to other department reports. I did tried to reading the document but could not comprehend 

how to accomplish this task. Thanks/Hissam

[AnandVyas]

Is this question for VA on Viya platform or SAS9? Based on the platform steps could vary.

[syedhisam]

My bad the  Environment is VA on SAS Viya 3.4.

[gwootton]

Are these reports organized in SAS Folders? If so, are they in something like /<Department>/Reports or /Reports/<Department>?

[syedhisam]

They are in SAS folder reports/department

[gwootton]

If you want the users to only be able to see the department folders they are a member of, we need to prohibit Read on the department folder. If you don't want them to be able to see the contents, we need to prohibit Read (convey).

As Reports likely already has Read (convey) granted to Authenticated Users, we could add a conditional prohibit of either Read or Read (convey) depending on the desired behavior I mentioned above.

A prohibit condition of: !(groupsForCurrentUser().contains('SASAdministrators') || groupsForCurrentUser().contains('Department'))

translates to prohibit if the user trying to access is not a member of the SASAdministrators or Department groups.