06-19-2017 08:47 AM
We have the following problem
We have a library for Domain A:
for Domain B:
for domain C:
We have a report "Dashboard" which uses
- Dataset 1 (Domain A)
- Dataset 2 (Domain B)
- Dataset 3 (Domain C)
This report is placed in a separate folder "Management Reports"
We want the "Management-user" to be able to see the report "Dashboard". He can create new reports on this datasets 1,2,3 but we don't want him to see/use datasets 4,5 in library A.
We also don't want to load the data twice in a separate library for the Management Dashboard.
If we give the rights for the Management user to library A,B,C and he has designer rights. He can create new reports on datasets 4,5.
06-19-2017 09:31 AM
a few questions:
Did you assign the permissions in VA or SAS Management Console, and, if the latter, did you assign
the permissions on the SAS Folders?
If a user is not allowed to access a data set, you would have to deny permissions on that data set,
for that user.
The problem with that is, if there are several users that have access to some of the data sets
in domain A, B and C, but not to others, it can become hard to administer this.
Would it maybe be possible to modify the domain A, B and C as such either the data sets the
users have access to are in one lib/folder, and the ones not accessable in another.
Or, would it maybe make sense to not have domains A, B and C and just one lib/folder, then
assigning permissions to the data sets?
It wouldnt be the best way as it is always recommended to assign permissions on the folders
rather than data sets. Yet in the described case where different folders and different data sets in
these folders are used, not sure that there is much you could do other than the permissions
on the lowest level (= tables).
Can you provide some more info on the data sets and folders and the users that need to have access to?
As mentioned above, I'd be curious about whether this is one situation for one certain user,
or, if this is a general set up.
06-20-2017 04:14 AM
In Sas Management Console on folder level.
Is it not possible to arrange this with Designer and Viewer (SAS VA)?
If the user only has viewer rights for the dataset, he can only view reports and not create reports himself/herself.