Hi @GyaniBaba
I ran some test and can confirm that the Create or Modify SAS Program capability is the one you're looking for.
When the user connect to the Metadata Server, it would check if the user has the capability or not.
The log would have something similar to:
2018-01-09 07:11:07,094 [16] DEBUG SAS.EC.Directory.Metadata.OMSProvider [(null)] - Action: Component Add-In 7.1 for Microsoft Office, Name Create or Modify SAS Program, Authorized = N
Cheers,
Damo