docs.datacontroller.io/docs/dcc-security.md

# Data Controller for SAS® - Security

## Summary
DC security is applied at the level of Table and Group.  Permissions can only be set at group level. There are two parts to adding a user:

1 - Adding the user to the relevant group in SAS metadata

2 - Ensuring that group has the appropriate access level in the configuration table

For guidance with adding SAS users, see [SAS Documentation](http://support.sas.com/documentation/cdl/en/mcsecug/69854/HTML/default/viewer.htm#n05epzfefjyh3dn1xdw2lkaxwyrz.htm).

## Details

In order to surface a table to a new group, simply add a record to the `DATACTRL.MPE_SECURITY` table.  The `library.dataset` value should go in the `BASE_TABLE` field, the level of access (either _EDIT_ or _APPROVE_) should go in the `ACCESS_LEVEL` field, and the exact name of the relevant metadata group should go in the `SAS_GROUP` field.  The change should then be submitted, and approved, at which point the new security setting will be applied.

![Screenshot](img/securitytable.png)
security page 2018-07-06 15:48:14 +00:00			`# Data Controller for SAS® - Security`

			`## Summary`
new guide for dates & datetimes, and updated security description 2018-09-28 09:57:13 +00:00			`DC security is applied at the level of Table and Group. Permissions can only be set at group level. There are two parts to adding a user:`
security page 2018-07-06 15:48:14 +00:00
			`1 - Adding the user to the relevant group in SAS metadata`

			`2 - Ensuring that group has the appropriate access level in the configuration table`

new guide for dates & datetimes, and updated security description 2018-09-28 09:57:13 +00:00			`For guidance with adding SAS users, see [SAS Documentation](http://support.sas.com/documentation/cdl/en/mcsecug/69854/HTML/default/viewer.htm#n05epzfefjyh3dn1xdw2lkaxwyrz.htm).`
security page 2018-07-06 15:48:14 +00:00
			`## Details`

			In order to surface a table to a new group, simply add a record to the `DATACTRL.MPE_SECURITY` table. The `library.dataset` value should go in the `BASE_TABLE` field, the level of access (either _EDIT_ or _APPROVE_) should go in the `ACCESS_LEVEL` field, and the exact name of the relevant metadata group should go in the `SAS_GROUP` field. The change should then be submitted, and approved, at which point the new security setting will be applied.

			`![Screenshot](img/securitytable.png)`