Access Control Action Set: Syntax

Provides actions for managing user access to resources

Table of Actions

Action NameDescription
accessPersonalCaslibsProvides administrative access to all personal caslibs (CASUSER and CASUSERHDFS)
assumeRoleAssumes a role
checkInAllObjectsReleases all objects that are checked out. Use this action if the current client session does not have a transaction
checkOutObjectReserves an object (and all of its children) for update by only the current client session. Prevents an object (and all of its parents) from being checked out exclusively by another session if checkOutType=Shared
commitTransactionPersists all changes in an access control transaction to the server, releases all checked-out objects, and terminates the transaction
completeBackupFlags a backup as complete
createBackupCreates a backup if one is not in progress
deleteDAListDeletes a denylist or an allowlist
dropRoleRelinquishes a role
isAuthorizedShows whether access is authorized
isAuthorizedActionsShows whether access is authorized to actions
isAuthorizedColumnsShows whether access is authorized to columns
isAuthorizedTablesShows whether access is authorized to tables
isInRoleShows whether a role is assumed
listAcsActionSetLists access controls for an action or action set
listAcsDataLists access controls for caslibs, tables, and columns
listAllPrincipalsLists all principals that have explicit access controls
listMetadataLists the metadata for caslibs, tables, columns, action sets, actions, or administrators
operActionMdAdds, deletes, and modifies action metadata
operActionSetMdAdds, deletes, and modifies action set metadata
operAdminMdAssigns users and groups to roles and modifies administrator metadata
operColumnMdAdds, deletes, and modifies column metadata
operDAPathsConfigures a denylist or allowlist of paths
operTableMdAdds, deletes, and modifies table metadata
remAllAcsActionSetRemoves all access controls for an action set or action
remAllAcsDataRemoves all access controls for a caslib, table, or column
repAllAcsActionReplaces all access controls for an action
repAllAcsActionSetReplaces all access controls for an action set
repAllAcsCaslibReplaces all access controls for a caslib
repAllAcsColumnReplaces all access controls for a column
repAllAcsTableReplaces all access controls for a table
rollbackTransactionDiscards all changes in an access control transaction, releases all checked-out objects, and terminates the transaction
showRolesAllowedShows the roles that a user is a member of
showRolesInShows the currently active role
startTransactionInitiates an access control transaction in the current client session. Within a transaction, changes are private. Within a transaction, only exclusively reserved (checked-out) objects and their children can be updated. A transaction terminates when it is committed or rolled back
statusTransactionShows whether client session has an active transaction
updSomeAcsActionAdds, deletes, and modifies some access controls for an action
updSomeAcsActionSetAdds, deletes, and modifies some access controls for an action set
updSomeAcsCaslibAdds, deletes, and modifies some access controls for a caslib
updSomeAcsColumnAdds, deletes, and modifies some access controls for a column
updSomeAcsTableAdds, deletes, and modifies some access controls for a table
whatCheckoutsExistLists checkouts held on an object, its parents, and optionally its children
whatIsEffectiveLists effective access and explanations (Origins)
Last updated: October 18, 2022