05-14-2012 02:13 AM
Can we do observation level control using SAS Management console? We have requirement to load all data to dimention and fact tables.
We need to give access some type of data to some users and other data to other users. Is it possible to dao row level access using SAS Management console. Please help me.
05-16-2012 06:40 AM
In terms of can you control the subset of data that an individual has access to then yes, there are OLAP Member-Level Permissions for cubes and BI Row-Level Permissions (via information maps) for tables. You might not necessarily apply the rules using SAS Management Console - e.g. BI Row-Level Permissions will be defined using SAS Information Map Studio, OLAP Member-Level Permissions can be applied using SAS Management Console.
Have a read of the following resources for more information:
If applying BI Row-Level Permissions consider whether it is being done for convenience (so people see, by default, the subset that is appropriate to them, but they might be able to get access to more data if they know how, and have access to the appropriate software), or is being done for security (they should only be able to access the appropriate subset and no more). The former is quite simple whereas the latter requires more work and mediated data access. There is more information in the documentation.
BTW at SASGF12 the other week they were talking about metadata bound libraries for SAS 9.3M2 and SAS 9.4. These sound promising in helping to prevent users that have access to appropriate software (like EG, DI or Foundation SAS) from potentially trying to access tables directly, bypassing metadata access controls.