SAS Authorization

[ronnynch]

Hi All,

I have a user reported to me that he is unable to overwrite/drop a table from his library. Upon checking the permission, I found out that he is in 2 different user group that are assigned to the library. The first user group allows him to read/write/drop table from the library. The second user group only allows him to read. Is this the reason he is not able to write/drop a table in the library?

I have attached the screenshot of the 2 group.

Appreciate if anyone can advise.

Thank you.

[gwootton · Accepted solution]

A user who is a member of both of those groups would have the effective permissions of the group allowing write access. You can view a user's effective permission on an object using the Advanced -> Explore Authorizations and searching for the user.

How to Check the Permissions of an Unlisted User
https://go.documentation.sas.com/doc/en/bicdc/9.4/mcsecug/p1b8i08zjyhkqwn16u5fa7gykrs5.htm#n18unbenq...

[ronnynch]

Hi @gwootton,

Thanks for the reply. I have checked the settings in the Advanced -> Explore Authorizations. User do have the write/drop access. However, he hit authorization level error when he runs his query. I have attached the screenshot of the user's permission setting and the error. Any idea why this is happening?

Thanks.

[Kurt_Bremser]

How has the library been assigned? If it is not assigned by using the metadata engine, metadata permissions will not be enforced (exception: metadata bound libraries). In this case, only operating system permissions come into play.

[ronnynch]

Hi @Kurt_Bremser ,

We assigned the library to the metadata server, refer to the attachment.

Thanks.

[Kurt_Bremser]

And have you looked at the operating system permissions?

[ronnynch]

Hi @Kurt_Bremser,
The issue is at the OS permission. Thanks for the solution.

[gwootton]

What is the error the user encounters?