Entity Level Security
Every data object in SAS Anti-Money Laundering is called an entity. Examples of entities include a customer, an account, and a household. For each entity, there are four authorizations that can be set: Search and Read, Create, Edit, and Delete. These authorizations link to the Search in Visual Investigator, Create objects (entity instances), Edit objects (entity instances), and Delete objects (entity instances) capabilities, respectively. Entity-level security enables administrators to control which objects can be accessed by user groups. Access rights are additive. That is, users gain all the access rights granted to all the groups of which they are members.
For example, you could enable investigators to search, create, and edit case records, but you could enable only managers and admins to delete them. In this post, I explore the entity- level security of the Case entity.
To do this, in the administration interface, I open the Case entity on the Data Objects page. Then I click the Authorization tab.
Notice that members of the AML Analyst group has Search And Read, Create, and Edit capabilities for the Case entity.
Select any image to see a larger version.
Mobile users: To view the images, select the "Full" version at the bottom of the page.
If a disposition creates an object (for example, adding an alert to a case) then the user applying that disposition must have the appropriate entity-level security to create that type of object.
With this entity level security set, an analyst can add an alert to a case. Let’s take a look.
I’m signed in as a member of the AML Analyst group. To create a case, I select the alert for Rebecca Hicks on the Alerts page, and on the toolbar, I click Disposition, and select Create case.
Then, I fill out all of the required information for the case, and click OK.
I’m successfully able to create the case!
Let’s see what happens if I remove the Create authorization for the Case entity for the AML analyst group and attempt to add an alert to a case again.
This time, when I try to add the alert for Alvin Martin to a case, the Create case disposition is not available to me.
This emphasizes the importance of the proper security being set in the system.
To learn more about entity- level security or our SAS Anti-Money Laundering solution in general, please visit https://support.sas.com/en/software/sas-anti-money-laundering-support.html.
Find more articles from SAS Global Enablement and Learning here.
