Yep, the mistake is assuming the SAS metadata is the leading service for all security.  This part is only (and partially) to trust when every access to the system  and data is controlled solely by the SAS service.  Trying to overrule the operating system security is not a smart idea. As the Operating system is always in control, do you ignore that data leaks are more troublesome to prevent /detect.  Needing sftp ssh or other host access makes this a idea a fail from start.  Possible causes: - Operating system controls blocks access. - inconsistent positioning of a default location (user home is not set as default but a inaccessible part of sasapp config) - lockdown settings in the SAS-configuration by you platform admin - Access is readonly setting on the used libname settings. - (metadata you have excluded this one) ... View more