Access to features in SAS Web Report Studio is controlled by role membership. 

Users who are not members of a role are limited to the implicit view-only capabilities. Users with implicit view-only capabilities cannot export or print reports. They also cannot perform tasks such as filtering, sorting, applying conditional highlighting, or changing graph or table types. Depending on the specific report, they might be able to follow links, enter prompt values, and view detail data.

Tip: To more easily keep track of users who have only implicit capabilities, you can create a new SAS Web Report Studio role with no capabilities selected.

Note: By default, the PUBLIC and SASUSERS groups are members of both the Web Report Studio: Report Creation and the Web Report Studio: Report Viewing roles. So, when you are ready to restrict access to specific capabilities, remember to remove PUBLIC (which includes all users in your deployment) and SASUSERS (which includes all users defined in metadata) from the applicable roles.

For more information, see Predefined Roles in the SAS 9.4 Intelligence Platform: Web Application Administration Guide.