Access Control Action Set: Syntax

Provides actions for managing user access to resources

repAllAcsTable Action

Replaces all access controls for a table.

CASL Syntax

Développer tout Réduire tout

accessControl.repAllAcsTable <result=results> <status=rc> /

acs

={{

caslib="string",

description="string",

filter="string",

identity="string",

identityType="GROUP" | "GUEST" | "USER",

permType="DENY" | "GRANT" | "NONE",

table="string"

}, {...}}

;

Parameter Descriptions

acs={{repsettable-1} <, {repsettable-2}, ...>}

specifies the replacement access controls.

The repsettable value can be one or more of the following:

* caslib="string"

specifies the caslib name.

description="string"

specifies the purpose of the access control.

filter="string"

specifies a row-level filter that limits a direct grant of the Select permission on a table. The expression can include identity-based substitutions (for example, SUB::SAS.Userid).

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "USER"

specifies the type of identity that is associated with the access control.

Default	USER

* permission="ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE"

specifies the permission type.

Default	SELECT

ALTERTABLE

affects the ability to change the properties or structure of a table.

CREATETABLE

affects the ability to save (persist) a table.

DELETE

affects the ability to delete rows.

DELETESOURCE

affects the ability to delete a source table.

DROPTABLE

affects the ability to unload a table.

INSERT

affects the ability to add rows.

LIMITEDPROMOTE

affects the ability to copy a session scope table to global scope within the same caslib.

MANAGEACCESS

affects the ability to set access controls.

READINFO

affects the ability to view and traverse objects.

SELECT

affects the ability to read data values.

UPDATE

affects the ability to change data values.

* permType="DENY" | "GRANT" | "NONE"

specifies addition of a direct denial, addition of a direct grant, or removal of an existing direct access control.

* table="string"

specifies the table name.

repAllAcsTable Action

Replaces all access controls for a table.

Lua Syntax

Développer tout Réduire tout

results, info = s:accessControl_repAllAcsTable{

acs

={{

caslib="string",

description="string",

filter="string",

identity="string",

identityType="GROUP" | "GUEST" | "USER",

permType="DENY" | "GRANT" | "NONE",

table="string"

}, {...}}

}

Parameter Descriptions

acs={{repsettable-1} <, {repsettable-2}, ...>}

specifies the replacement access controls.

The repsettable value can be one or more of the following:

* caslib="string"

specifies the caslib name.

description="string"

specifies the purpose of the access control.

filter="string"

specifies a row-level filter that limits a direct grant of the Select permission on a table. The expression can include identity-based substitutions (for example, SUB::SAS.Userid).

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "USER"

specifies the type of identity that is associated with the access control.

Default	USER

* permission="ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE"

specifies the permission type.

Default	SELECT

ALTERTABLE

affects the ability to change the properties or structure of a table.

CREATETABLE

affects the ability to save (persist) a table.

DELETE

affects the ability to delete rows.

DELETESOURCE

affects the ability to delete a source table.

DROPTABLE

affects the ability to unload a table.

INSERT

affects the ability to add rows.

LIMITEDPROMOTE

affects the ability to copy a session scope table to global scope within the same caslib.

MANAGEACCESS

affects the ability to set access controls.

READINFO

affects the ability to view and traverse objects.

SELECT

affects the ability to read data values.

UPDATE

affects the ability to change data values.

* permType="DENY" | "GRANT" | "NONE"

specifies addition of a direct denial, addition of a direct grant, or removal of an existing direct access control.

* table="string"

specifies the table name.

repAllAcsTable Action

Replaces all access controls for a table.

Python Syntax

Développer tout Réduire tout

results=s.accessControl.repAllAcsTable(

acs

=[{

"caslib":"string",

"description":"string",

"filter":"string",

"identity":"string",

"identityType":"GROUP" | "GUEST" | "USER",

"permType":"DENY" | "GRANT" | "NONE",

"table":"string"

}<, {...}>]

)

Parameter Descriptions

acs=[{repsettable-1} <, {repsettable-2}, ...>]

specifies the replacement access controls.

The repsettable value can be one or more of the following:

* "caslib":"string"

specifies the caslib name.

"description":"string"

specifies the purpose of the access control.

"filter":"string"

specifies a row-level filter that limits a direct grant of the Select permission on a table. The expression can include identity-based substitutions (for example, SUB::SAS.Userid).

"identity":"string"

specifies the user or group.

* "identityType":"GROUP" | "GUEST" | "USER"

specifies the type of identity that is associated with the access control.

Default	USER

* "permission":"ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE"

specifies the permission type.

Default	SELECT

ALTERTABLE

affects the ability to change the properties or structure of a table.

CREATETABLE

affects the ability to save (persist) a table.

DELETE

affects the ability to delete rows.

DELETESOURCE

affects the ability to delete a source table.

DROPTABLE

affects the ability to unload a table.

INSERT

affects the ability to add rows.

LIMITEDPROMOTE

affects the ability to copy a session scope table to global scope within the same caslib.

MANAGEACCESS

affects the ability to set access controls.

READINFO

affects the ability to view and traverse objects.

SELECT

affects the ability to read data values.

UPDATE

affects the ability to change data values.

* "permType":"DENY" | "GRANT" | "NONE"

specifies addition of a direct denial, addition of a direct grant, or removal of an existing direct access control.

* "table":"string"

specifies the table name.

repAllAcsTable Action

Replaces all access controls for a table.

R Syntax

Développer tout Réduire tout

results <– cas.accessControl.repAllAcsTable(s,

acs

=list( list(

caslib="string",

description="string",

filter="string",

identity="string",

identityType="GROUP" | "GUEST" | "USER",

permType="DENY" | "GRANT" | "NONE",

table="string"

) <, list(...)>)

)

Parameter Descriptions

acs=list( list(repsettable-1) <, list(repsettable-2), ...>)

specifies the replacement access controls.

The repsettable value can be one or more of the following:

* caslib="string"

specifies the caslib name.

description="string"

specifies the purpose of the access control.

filter="string"

specifies a row-level filter that limits a direct grant of the Select permission on a table. The expression can include identity-based substitutions (for example, SUB::SAS.Userid).

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "USER"

specifies the type of identity that is associated with the access control.

Default	USER

* permission="ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE"

specifies the permission type.

Default	SELECT

ALTERTABLE

affects the ability to change the properties or structure of a table.

CREATETABLE

affects the ability to save (persist) a table.

DELETE

affects the ability to delete rows.

DELETESOURCE

affects the ability to delete a source table.

DROPTABLE

affects the ability to unload a table.

INSERT

affects the ability to add rows.

LIMITEDPROMOTE

affects the ability to copy a session scope table to global scope within the same caslib.

MANAGEACCESS

affects the ability to set access controls.

READINFO

affects the ability to view and traverse objects.

SELECT

affects the ability to read data values.

UPDATE

affects the ability to change data values.

* permType="DENY" | "GRANT" | "NONE"

specifies addition of a direct denial, addition of a direct grant, or removal of an existing direct access control.

* table="string"

specifies the table name.

Last updated: February 25, 2026