Configuration Properties: Reference (Applications)

• SAS Data Explorer
• SAS Data Studio
• SAS Infrastructure Data Server
  • sas.dataserver.common
  • sas.dataserver.conf
  • sas.dataserver.hba
  • sas.dataserver.pool
  • sas.dataserver.pool.hba
• SAS Logon Manager
  • sas.logon.callback
  • sas.logon.custom
  • sas.logon.groups
  • sas.logon.initial
  • sas.logon.jasig.cas
  • sas.logon.jwt
  • sas.logon.kerberos
  • sas.logon.oauth.providers.external_oauth
  • sas.logon.pam
  • sas.logon.provider.guest
  • sas.logon.saml
  • sas.logon.saml.providers.external_saml
  • sas.logon.sas9
  • sas.logon.sessions
  • sas.logon.tenancy
• SAS Studio 5.2 (Enterprise)
• SAS Studio 5.2 (Basic)
• SAS Visual Analytics

SAS Data Explorer

SAS Data Explorer enables you to discover data and copy it to a CAS server.

sas.dataexplorer

The set of configuration properties for SAS Data Explorer.

casSessionImportNumNodes

The number of nodes on which to start CAS sessions when running import jobs. A value of 0 means all nodes.

casSessionInteractiveNumNodes

The number of nodes on which to start CAS sessions used for browsing data sources. A value of 0 means all nodes.

filterAvailableTab

Turn the toggle switch on to automatically populate the Available and Data Sources tabs with tables only from the default caslib for your site. The default is off.

By default, the Available and Data Sources tabs display all tables that have been loaded to memory, from any CAS server to which you have access. If some nodes are slow to respond to queries from the Available and Data Sources tabs, your browser might freeze while it is waiting for a response. If slow performance persists, an administrator can specify an option so that the Available and Data Sources tabs are automatically populated with tables only from the default caslib for your site.

jobExecutionProvider

Configurable values for the SAS Data Explorer job execution provider job:

• heartbeatInterval. Default is 300. The maximum number of items that can be submitted in a single import.
• scheduledJobExpiresAfter. Not specified by default. The amount of time after a scheduled job completion before the job execution service deletes the job. Specify time in W3C XML duration format (for example, PT5M = 5 minutes). A null value indicates that job is not deleted.

maxImportQueueSize

The maximum number of items that can be imported with the Import All option on the Import tab. The default is 100F.

availableTabEntryTimeoutMS

Specifies how long (in seconds) Data Explorer waits for a given library to report back its list of available tables. The default value is 10 seconds. If the request does not come back within the allotted time, the library is not included in the available tables list. This value affects the list of available tables in the Available tab and the Data Sources tab.

supplementalProperties

The set of user-added, advanced properties.

Note: Do not enter a property name-value pair unless you are directed to do so by SAS Technical Support.

SAS Data Studio

SAS Data Studio provides a way for you to prepare data, including data transformations.

sas.datastudio

The set of configuration properties for SAS Data Studio.

casSessionNumNodes

The number of nodes on which to start a SAS Data Studio CAS session (0 means all nodes).

casSessionTimeout

The number of seconds to specify as the CAS session time-out for sessions that SAS Data Studio creates.

interactiveJobExpiresAfter

The amount of time after an interactive data plan job completes before the job execution service deletes the job. Specify time in W3C XML duration format (for example, PT5M = 5 minutes). A null value indicates that job is not deleted.

maxStreamingCellCount

The maximum number of cells returned to SAS Data Studio for the sample result table. The default value is 1,024.

maxStreamingCellSize

The maximum number of characters in each cell returned to SAS Data Studio in the sample result table. A value of -1 specifies an unlimited size.

saveTableJobExpiresAfter

The amount of time after a data plan job, which saves a table, completes before the job execution service deletes the job. Specify time in W3C XML duration format (for example, PT5M = 5 minutes). A null value indicates that job is not deleted.

SAS Infrastructure Data Server

SAS Infrastructure Data Server is based on PostgreSQL version 15 and is configured specifically to support SAS software. See Overview in SAS Viya Administration: Infrastructure Servers. Here is the list of SAS Infrastructure Data Server configuration definitions that consist of third-party PostgreSQL and pgpool-II configuration properties.

sas.dataserver.common

The set of properties that are common to a cluster (that is, both to pgpool-II and to PostgreSQL nodes).

For a list of the valid PostgreSQL property names (configuration parameters) and descriptions, see https://www.postgresql.org/docs/15/runtime-config.html.

sas.dataserver.conf

The set of properties that are used to set up the SAS Infrastructure Data Server node database configuration file, postgresql.conf.

For a list of the valid PostgreSQL property names (configuration parameters) and descriptions, see https://www.postgresql.org/docs/15/runtime-config.html.

sas.dataserver.hba

The set of properties that are used to set up the SAS Infrastructure Data Server node host-based authentication file, pg_hba.conf.

For a list of the valid PostgreSQL property names (authorization records) and descriptions, see https://www.postgresql.org/docs/15/auth-pg-hba-conf.html.

sas.dataserver.pool

The set of properties that are used to set up the pgpool-II node configuration file, pgpool.conf.

For a list of the valid pgpool-II property names (key-value pairs) and descriptions, see https://www.pgpool.net/docs/pgpool-II-4.4.4/en/html/runtime-config.html.

sas.dataserver.pool.hba

The set of properties that are used to set up the pgpool-II node host-based authentication file, pool_hba.conf.

For a list of the valid pgpool-II property names (key-value pairs) and descriptions, see https://www.pgpool.net/docs/pgpool-II-4.4.4/en/html/client-authentication.html.

SAS Logon Manager

SAS Logon Manager provides OAuth2 and OpenID Connect services for authentication, and a user interface for sign-in, sign out, and other related functions. See Authentication: Overview in SAS Viya Administration: Authentication. Here are the configuration properties for SAS Logon Manager:

sas.logon.callback

The set of properties that are used to configure the allowlist of URIs for trusted applications.

allowed.uris

The comma-delimited list of URIs that users can be redirected to after signing in following a time-out or logoff.

sas.logon.custom

The set of properties that are used to provide custom content that is included on the Sign In to SAS page.

login

The URI of the custom content included on the Sign In to SAS page.

logout

The URI of the custom content included on the Sign In to SAS page when users sign out of the system.

timedout

The URI of the custom content included on the time-out page.

sas.logon.groups

The set of properties that are used to customize lookup of group authorities.

assumable

Specifies groups that have an elevated level of access that the user must approve at sign-in in order to assume those groups in a session.

approvalExpirySeconds

When approving or denying access to a third-party application, specifies the number of seconds that the approval or denial should be remembered.

groupLookupRequired

Requires groups to be determined for authentication to succeed.

recursion.enabled

Allows recursive lookups of authorities for groups assigned to users.

requiresRecursion

The comma-separated list of groups that require a recursive lookup to determine externally assigned authorities.

sas.logon.initial

The set of properties that are used to initially configure the system.

passwordResetLifetime

The number of milliseconds for which that the password reset code is valid after restart.

redirectUri

The URI to which the initial user should be redirected after resetting the password.

reset.enabled

Displays a password reset link for the initial user account at start-up.

user

The user name for the initial user account.

sas.logon.jasig.cas

The set of properties that are used to enable sign-ins using a Java in Administration Special Interest Group (Jasig) central authentication server (CAS) provider.

autoLink

Automatically open the link to this provider when the login page is displayed.

casServerUrl

The URL for the CAS server.

enabled

Enable sign-ins using CAS.

keepalive.enabled

Keep the CAS server session active by obtaining proxy tickets.

keepalive.proxyTicketUrl

The URL to obtain proxy tickets for keepalive purposes.

linkText

The hyperlink to display on the sign-in page.

sasLogonUrl

The URL of the SAS Logon Manager (for example: https://sas.example.com/SASLogon).

service.artifactParameter

The request parameter to look for when attempting to see whether a ticket was sent from the server.

service.authenticateAllArtifacts

Process all tickets, including proxy tickets.

service.sendRenew

Force the server to authenticate the user again, even if the user has previously authenticated.

service.serviceParameter

The request parameter to send the server for this service.

showLinkText

Show the link text on the sign-in page.

single.signOn.enabled

Enable single sign-on.

single.signOut.enabled

Local sign-out should sign user out of the CAS server also.

single.signOut.logoutParameterName

The parameter name that identities a back channel single logoff request from the CAS server.

validate.encoding

Encoding of the ticket validation response from the server.

validate.renew

Determine whether the ticket validation request should include a renew.

sas.logon.jwt

The set of properties that are used to configure how JSON web tokens are issued.

claims.exclude

The comma-separated list of claims that should be excluded from the JSON web token.

issuer.uri

The URI of the application, for the issuer claim in tokens (for example, https://example.com/SASLogon).

policy.accessTokenValiditySeconds

The default number of seconds that access tokens are valid for after being issued in the default zone.

policy.global.accessTokenValiditySeconds

The default number of seconds that access tokens are valid for after being issued in all zones.

policy.global.refreshTokenValiditySeconds

The default number of seconds that refresh tokens are valid for after being issued in all zones.

policy.refreshTokenValiditySeconds

The default number of seconds that refresh tokens are valid for after being issued in the default zone.

refresh.restrictGrant

Grant refresh tokens only to clients with a scope of refresh_token for offline access.

signingKey

Either a Base64-encoded RSA private key that is used to digitally sign tokens, or a simple passphrase for HMACs. Enter a value only if you want to override the system-generated RSA private key.

sas.logon.kerberos

The set of properties that are used to enable sign-ins using Integrated Windows Authentication (IWA).

debug

Enables the debug mode of the JAAS Kerberos login module.

disableDelegationWarning

Disables the warning message displayed to users when Kerberos credential delegation is not properly configured.

holdOnToGSSContext

Enables Kerberos delegation to SAS Cloud Analytic Services.

impersonate

Impersonate user credentials using Microsoft S4USELF extension to Kerberos for outgoing connections.

keyTabLocation

The URL of the keytab file (for example, file:////opt/sas/viya/conf/etc/my_keytab).

servicePrincipal

The name of the service principal in the keytab.

spn

The HTTP service principal name (SPN), if different from the principal name in the keytab.

stripRealmForGss

Removes the @... from the end of the user name.

sas.logon.oauth.providers.external_oauth

The set of OAUTH provider properties that are used to enable sign-ins using an external provider. Modifying one of these property values requires you to restart SAS Logon Manager. For more information, see SAS Viya Administration in SAS Help Center.

addShadowUserOnLogin

Adds a local shadow user upon successful authentication.

attributeMappings.user_name

The attribute claim to use as the user name.

authUrl

The URL to the authorization endpoint.

clientAuthInBody

Include the client credentials in the request body.

discoveryURL

The URL used to discover the provider and obtain information needed to interact with it.

emailDomain

The comma-delimited list of possible email address domains of users that can sign on with this provider.

issuer

The principal that issued the token, as a case-sensitive string or URI.

linkText

The text that should be displayed on the sign-in page for this provider.

passwordGrantEnabled

Enable use of the password grant

relyingPartyId

The client ID registered in the provider.

relyingPartySecret

The secret registered in the provider for the client ID.

responseType

The expected response type, either ‘code’ or ‘token’.

scopes

The comma-delimited list of scopes for the authorization request.

showLinkText

Shows the link text on the sign-in page.

tokenKey

The HMAC key or RSA public key used to sign tokens.

tokenKeyUrl

The URL to obtain the token key.

tokenUrl

The URL to the token endpoint.

type

Either 'oidc1.0' or 'oauth2.0'.

userInfoURL

The OIDC 1.0 URL that returns claims about the authorized user.

sas.logon.pam

The set of properties that are used to enable sign-ins using PAM.

enabled

Enables sign-in using PAM.

serviceName

The service name in the PAM configuration.

sas.logon.provider.guest

The set of properties that are used to configure guest access to the system.

Apply configuration only to this tenant (provider)

When this property is set to off, the configuration applies to all tenants, including the provider. Each tenant can override the configuration from within its own environment.

Note: Apply configuration only to this tenant (provider) is available only to provider tenants in a multi-tenant environment.

enabled

Enable anonymous guest access to web applications.

sas.logon.saml

The set of Security Assertion Markup Language (SAML) properties that are used to enable sign-ins using an external identity provider.

entityBaseURL

The URL of the application where SAML assertions are accepted, (for example: https://example.com/SASLogon).

entityID

The entity ID of the service provider.

maxAuthenticationAge

The maximum time (in seconds) between users’ initial authentication with the IDP and processing of an authentication statement.

serviceProviderCertificate

The PEM-encoded, X.509 certificate that is used by the service provider.

serviceProviderKey

The PEM-encoded, RSA private key that is used by the service provider.

serviceProviderKeyPassword

The password for the private key.

setProxyParams

Allows the base URL to reside behind an HTTP proxy.

CAUTION

Do not modify setProxyParams. The value should remain off (false).

signatureAlgorithm

The algorithm for SAML signatures. The accepted values are SHA1, SHA256, and SHA512.

signMetaData

Specifies that the local service provider should sign metadata.

signRequest

Specifies that the local service provider should sign SAML requests.

socket.connectionManagerTimeout

The number of milliseconds before the connection pooling times out for HTTP requests for SAML metadata.

socket.soTimeout

The number of milliseconds before the read times out for HTTP requests for SAML metadata.

wantAssertionSigned

Specifies that the assertions must be signed.

sas.logon.saml.providers.external_saml

The set of Security Assertion Markup Language (SAML) identity provider properties that are used to enable sign-ins using an external provider.

addShadowUserOnLogin

Adds a local shadow user upon successful authentication. If set to false, users must be pre-created in the database to log on.

assertionConsumerIndex

The index of the assertion consumer service to use from identity provider metadata. The value must be a positive integer.

authnContext

The comma-delimited list of authorization contexts to include in SAML requests to the identity provider.

emailDomain

The comma-delimited list of possible email address domains of users that can log on with this provider.

idpMetadata

The identity provider metadata or the URL to the metadata.

linkText

The hyperlink to display on the sign-in page.

metadataTrustCheck

Specifies that the identity provider certificate must be trusted.

nameID

The default name ID format.

showSamlLoginLink

Displays a link to the identity provider on the sign-in page.

skipSslValidation

Skips Transport Layer Security (TLS) validation of the certificate.

sas.logon.sas9

The set of properties that are used to enable sign-ins using SAS 9.4 and later.

autoLink

Automatically open the link to SAS 9 when the login page is displayed.

enabled

Enable sign-ins using SAS 9 credentials.

linkText

The hyperlink to display on the sign-in page.

sas9LogonUrl

The URL of the SAS 9 Logon Manager (for example, https://sas9.sas.example.com/SASLogon).

showLinkText

Show the link text on the sign-in page.

single.signOn.enabled

Redirect to SAS 9 for single sign-on.

single.signOut.enabled

Local sign-out should sign user out of SAS 9 also.

viyaLogonUrl

The URL of the SAS Viya Logon Manager (for example, https://viya.sas.example.com/SASLogon).

sas.logon.sessions

The set of properties that are used to configure how concurrent SAS Logon sessions are handled.

maxConcurrentSessions

The maximum number of allowed concurrent SAS Logon sessions. A value of -1 allows an unlimited number of sessions.

rejectNewSessionsIfMaxExceeded

Rejects new SASLogon sessions if the maximum number of sessions is exceeded. If false, when the maximum number of sessions is reached, an existing session is invalidated to allow a new one to be created.

sas.logon.tenancy

The set of properties that are used to configure multi-tenancy.

sas.logon.tenancy.autoUpdateLdapConfiguration

Automatically update all identity zones’ LDAP configurations when the provider LDAP configuration is changed.

sas.logon.tenancy.bootstrap.enabled

Automatically configure identity zones and LDAP when tenants are onboarded or access policy is changed.

SAS Studio 5.2 (Enterprise)

SAS Studio is a development application for SAS that you access through your web browser. SAS Studio 5.2 (Enterprise) relies on the SAS Viya service layer.

sas.studiov

The set of configuration properties for SAS Studio 5.2 (Enterprise).

abandonedSessionTimeout

Specifies the time-out for abandoned sessions in SAS Studio and on the SAS Compute Server. The default value is 5 (minutes).

Note: This option is available starting in the March 2022 release.

allowCopyPasteData

Allow users to copy and paste from the table viewer.

allowDownload

Allow users to download data.

allowExport

Allow administrators to restrict users from exporting data.

allowGit

Allow users to use Git functionality.

allowGitKerberosAuthentication

Enable users to create a Kerberos Git profile in SAS Studio. The default value is false.

Note: This option is available starting in March 2022 release.

allowGitPassword

Enables users to put their password in a profile definition that accesses Git by using HTTPS authentication. The default value is false. To allow the creation of Git profiles by using HTTPS authentication, set this property to true. By default, SAS Studio uses SSH authentication due to the risk of password exposure with HTTPS.

allowGitSSLCertFilePath

Enables users to create Git HTTPS profiles with a specified SSL Certification. The default value is false.

allowPrintData

Allow users to print from the table viewer.

allowUpload

Allow users to upload data.

enableAutoCompleteLibraries

Allows administrators to control the autocompletion of library names when editing code.

enableAutoCompleteTables

Allows administrators to control the autocompletion of table names when editing code.

fileNavigationCustomRootPath

Specifies the custom path where file navigation begins.

• In Linux environments, use the configuration properties, fileNavigationRoot and fileNavigationCustomPath, to set the custom path.
• In Windows environments, you must also set these two configuration properties. However, UNC paths are not valid. Create a symbolic link (using the mklink command in Windows) for the network drive. Then set fileNavigationCustomRootPath to the name of the symbolic link.

Note: This property does not control security settings. Users are able to access any files on the SAS Server based on their permission settings.

fileNavigationRoot

Specifies where file navigation begins.

Note: This property does not control security settings. Users are able to access any files on the SAS Server based on their permission settings.

largeTableRows

Specifies the maximum number of rows to display in the table viewer. The default value is 50,000.

longPollingHoldTimeSeconds

The maximum number of seconds to wait for a message from the client. The default value is 30.

maxGitFileSize

The maximum file size (in bytes) allowed for Git files. The default value is 30,000,000.

maxUploadSize

The maximum file size (bytes) allowed for upload. The default value is 104,857,600. The maximum allowed value for this property is 2,147,483,647.

persistBackgroundSubmitJobs

Allows persistence of background submit entries in the submission status view window. The default value is false. For information, see Using the Submission Status Window in SAS Studio: User’s Guide.

serverDisplayName

Specifies text to display in the SAS Studio user interface in place of the server name. The default value is blank, which specifies that the server name is displayed.

showServerFiles

Allow administrators to show or hide the local file system.

restrictUploadTypes

Restricts upload functionality by mediaType, specified in the uploadAllowList property.

Note: This property is available starting in the June 2024 release.

uploadAllowList

Specify a comma-separated list of allowed media types for upload. Here are some guidelines and examples:

• This list is ignored if restrictUploadTypes is false.
• Do not use quotation marks in your list.
• A blank list disallows all types.
• A wildcard (*) or (/) allows all types.
• The text/* value allows any text media type.
• The text/plain value allows only plain text files.
• The text/plain,text/csv value allows only those two media types.
• To allow .sas files, include application/x-sas in your list of values.

Note: This property is available starting in the June 2024 release.

SAS Studio 5.2 (Basic)

SAS Studio is a development application for SAS that you access through your web browser. SAS Studio 5.2 (Basic) relies on an embedded web application that is part of SAS Viya.

The following table lists properties that can be added to the /opt/sas/viya/config/etc/sysconfig/sasstudio.conf file on Linux systems, or \ProgramData\SAS\Viya\etc\sasstudio\default\init_usermods.properties file on Windows. See Update SAS Studio Configuration Properties.

SAS Studio: Configuration Properties

Property	Default Value	Description
sas.studio.abandonedSessionTimeout	(blank)	Specifies the time-out for abandoned sessions in SAS Studio and on the SAS Compute Server. The default value is 5 (minutes). Note: This option is available starting in the March 2022 release.
sas.studio.allowDownload	true	Allow users to download data.
sas.studio.allowGit	true	Specifies whether the Git functionality is available in SAS Studio.
sas.studio.allowGitKerberosAuthentication	false	Enables users to create a Kerberos Git profile in SAS Studio. Note: This option is available starting in the March 2022 release.
sas.studio.allowGitPassword	(blank)	Enables users to put their password in a profile definition that accesses Git by using HTTPS authentication. The default value is false. To allow the creation of Git profiles by using HTTPS authentication, set this property to true. By default, SAS Studio uses SSH authentication due to the risk of password exposure with HTTPS.
sas.studio.allowGitSSLCertFilepath	false	Enables users to create Git HTTPS profiles with a specified SSL Certification.
sas.studio.allowUpload	true	Allow users to upload data.
sas.studio.appserver.https.keystorefile	(blank)	Specifies the keystore file to use for HTTPS.
sas.studio.appserver.https.keystorepass	(blank)	Specifies the keystore password to use for HTTPS.
sas.studio.appserver.https.port	(blank)	Specifies the port to use for HTTPS.
sas.studio.appserver.port	(blank)	Specifies the port to use for HTTP.
sas.studio.basicPort	8591	Specifies the port to use to connect to the workspace server.
sas.studio.enableAutoCompleteLibraries	true	Specifies whether libraries are fetched when a user enters code with autocompletion enabled.
sas.studio.enableAutoCompleteTables	true	Specifies whether tables are fetched when a user enters code with autocompletion enabled.
sas.studio.fileNavigationCustomRootPath	(blank)	Specifies a path that determines the root node in the Folders tree. Note: You can use <userid> substitution for a directory path (for example, /home/<userid>). This property does not control security settings. Users are able to access any files on the SAS Server based on their permission settings.
sas.studio.fileNavigationRoot	true	Specifies that the system root location be displayed in the Folders tree. Note: Set the value to false when the LOCKDOWN statement or the LOCKDOWN system option is used. For more information, see References in SAS Viya Administration: Programming Run-Time Servers.
sas.studio.largeTableRows	50,000	Specifies the maximum number of rows to display in the table viewer. If the number of rows in the table is unknown or greater than the value specified for the sasstudio.largeTableRows property, the following behavior occurs: SAS Studio displays a warning that sorting could take a long time. SAS Studio does not generate a list of distinct values to select from when SAS Studio filters the data.
sas.studio.longPollingHoldTimeSeconds	30	Specifies the maximum number of seconds to wait for a message from the client.
sas.studio.maxGitFileSize	30 MB	Specifies the maximum file size (in bytes) allowed for Git files.
sas.studio.maxUploadSize	10485760 (10MB)	Specifies the number of bytes allowed for file upload. Note: Large files can take a long time to load. If you have a large amount of content to upload, divide your content into smaller files if possible.
sas.studio.nativeEngines	(blank)	Specifies the engines used to distinguish SAS data set tables from DBMS tables.
sas.studio.studioDataParentDirectory	(blank)	Specifies the location of SAS Studio preferences, snippets, my tasks, and more. This preference is specific to the local computer. The default value is blank. An administrator must mount a shared location to access data from any workspace server session. Note: You can use <userid> substitution for a directory path (for example, /home/<userid>).
sas.studio.serverDisplayName	(blank)	Specifies text to display in the SAS Studio user interface in place of the server name.
sas.studio.useSortKeyFunction	true	Specifies whether to generate a sortkey function when ordering in the SQL statement
server.servlet.session.timeout	1	Specifies the elapsed inactive time (in seconds or minutes) that triggers display of the 5-minute warning window for session time-out. For example, server.servlet.session.timeout=600 specifies a duration of 600 seconds and server.servlet.session.timeout=30m specifies a duration of 30 minutes.
studioPreferences.general.defaultTextEncoding	UTF-8	Specifies the default SAS encoding method.
studioPreferences.SASLanguage.ValidVarName	ANY	Specifies the default value for the VALIDVARNAME option.
sas.studio.restrictUploadTypes	false	Restricts upload functionality by mediaType, specified in the uploadAllowList property. Note: This property is available starting in the June 2024 release.
sas.studio.uploadAllowList		Specify a comma-separated list of allowed media types for upload. Here are some guidelines and examples: This list is ignored if restrictUploadTypes is false. Do not use quotation marks in your list. A blank list disallows all types. A wildcard (*) or (/) allows all types. The text/* value allows any text media type. The text/plain value allows only plain text files. The text/plain,text/csv value allows only those two media types. To allow .sas files, include application/x-sas in your list of values. Note: This property is available starting in the June 2024 release.

SAS Visual Analytics

sas.visualanalytics

Background Queries

Specifies the relative amount of background queries to use when loading reports. Background queries are requests for objects that are used in a report but are not currently visible to the user. Values range from 0 (no background queries) to 5 (maximum number of background queries). The default value is 0.

Related Measures Limit

The related measures query does not run for data sources that have a measure count that exceeds this limit.

backgroundPageRendering

Specifies the number of pages the SAS Visual Analytics loads in the background.

IFrame Sandbox Attribute Value

Specifies the value of the sandbox attribute for inline frames (iframes) in SAS Visual Analytics reports. Web content objects and data-driven content objects use inline frames. The default value is allow-forms allow-presentation allow-same-origin allow-scripts.

Note: To enable links in inline frames to open a new window or tab, add allow-popups to the value.

Note: To enable downloads in inline frame content in Google Chrome, add allow-downloads to the value.