By default, only Administrators can view the User Activity and User Activity Insights reports in SAS® Environment Manager. To allow non-administrators access, you need to do the following:
- Update the rule that hides the /Products/SASEnvironmentManager/Dashboard Items folder path in SAS Content, which contains the reports.
- Grant Read access to audit tables in the SystemData caslib.
1. Update the Rule
- In SAS Environment Manager ► Rules, search for Rule ID 72f043a5-3c45-41ed-9365-d81d758b5bb2.
- Edit the rule and update the condition as follows:
- To grant access to a single user in SAS® Viya® 3.x or the SAS® Viya® platform (for example, sasdemo):
!groupsForCurrentUser().contains('SASAdministrators') && !groupsForCurrentUser().contains('sasapp') && currentUser() ne 'sasdemo'
-
- To grant access to a group (for example, EVDashboard):
- SAS Viya 3.x:
!groupsForCurrentUser().contains('SASAdministrators') && !groupsForCurrentUser().contains('sasapp') && !groupsForCurrentUser().contains('EVDashboard')
- SAS Viya Platform:
!groupsForCurrentUser().contains('SASAdministrators') && !groupsForCurrentUser().contains('sasapp') && groupsForCurrentUser().contains('EVDashboard')
Note: These updates grant visibility to all reports in the Dashboard Items folder.
For more information about Rules, see the following resources:
2. Grant Access to the Audit Data:
- In SAS Data Explorer ► Data Sources, expand cas-shared-default.
- Edit the authorization on the SystemData caslib.
- Add the user or group.
- Grant Read access (Read and Select).
- Grant LimitedPromote.
Note: The above steps grant Read access to all tables under SystemData. If you want to restrict access to only the audit tables, complete the following steps:
- Remove permissions at the table level for all tables except audit tables.
- Audit tables require ReadInfo and Select.
For more information about SAS® Cloud Analytic Services (CAS) authorization, see the following resources: