Use an Access Control Template (ACT)

Why Use ACTs?

Use ACTs to avoid having to repeatedly set the same explicit permissions for the same identities on multiple items. When you apply an ACT to an item, the ACT settings are added to the item's protections.

How to Use an ACT

  1. Determine whether there is an existing ACT that you can use.
    1. On the Plug-ins tab of SAS Management Console, select Authorization Managerthen selectAccess Control Templates.
    2. On the Permission Pattern tab of each ACT, examine the settings for each identity. If you do not find an appropriate ACT, consider using a combination of ACTs and explicit settings or creating a new ACT.
      Note: Do not confuse an ACT's Authorization tab with its Permission Pattern tab. Settings on an ACT's Authorization tab affect who can access that ACT; settings on an ACT's Permission Pattern tab affect access to the items to which that ACT is applied.
  2. When you have identified an ACT that you want to use, navigate to an item to which you will add that ACT's settings. On the item's Authorization tab, click Access Control Templates.
  3. Expand the nodes in the Available list box, move the ACT to the Currently Using list box, and click OK.
    Note: The repository ACT default ACT is typically not in the Currently Using list box because that ACT is typically not applied to any items.
    Note: You can apply multiple ACTs. For example, on a report folder, you might apply one ACT that grants read access to a SALES group and also apply another ACT that grants read and write access to a Report Creators group. If there is a tie (for example, a group is granted ReadMetadata in one applied ACT and denied ReadMetadata in another applied ACT), the outcome is a denial. For a full discussion of precedence, see the SAS Intelligence Platform: Security Administration Guide.
  4. On the item's Authorization tab, notice that the Users and Groups list box now includes the identities that participate in the ACT that you selected. Select each identity and verify that the revised settings are as you expect. On the Authorization tab of an item to which an ACT is applied, settings that are explicit white check box in the ACT's pattern are green green check box.
  5. In the item's Properties dialog box, click OK.

See Also

Use and Enforcement of Each Permission
How to Interpret the Authorization Tab
Centralize Permissions with ACTs
Who Can Set Permissions?
Copyright © SAS Institute Inc. All rights reserved.