DOCUMENTATION
Sign In

Get access to My SAS, trials, communities and more.

SAS Viya Platform System Programming Guide
 
CASL
Lua
Python
R

Access Control Action Set: Syntax

Provides actions for managing user access to resources

repAllAcsTable Action

Replaces all access controls for a table.

CASL Syntax

Expand allCollapse all
accessControl.repAllAcsTable <result=results> <status=rc> /
acs
={{
required parameter caslib="string",
description="string",
filter="string",
identity="string",
required parameter identityType="GROUP" | "GUEST" | "USER",
required parameter permission="ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE",
required parameter permType="DENY" | "GRANT" | "NONE",
required parameter table="string"
}, {...}}
;

Parameter Descriptions

acs={{repsettable-1} <, {repsettable-2}, ...>}

specifies the replacement access controls.

The repsettable value can be one or more of the following:

* caslib="string"

specifies the caslib name.

description="string"

specifies the purpose of the access control.

filter="string"

specifies a row-level filter that limits a direct grant of the Select permission on a table. The expression can include identity-based substitutions (for example, SUB::SAS.Userid).

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "USER"

specifies the type of identity that is associated with the access control.

DefaultUSER
* permission="ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE"

specifies the permission type.

DefaultSELECT
ALTERTABLE

affects the ability to change the properties or structure of a table.

CREATETABLE

affects the ability to save (persist) a table.

DELETE

affects the ability to delete rows.

DELETESOURCE

affects the ability to delete a source table.

DROPTABLE

affects the ability to unload a table.

INSERT

affects the ability to add rows.

LIMITEDPROMOTE

affects the ability to copy a session scope table to global scope within the same caslib.

MANAGEACCESS

affects the ability to set access controls.

READINFO

affects the ability to view and traverse objects.

SELECT

affects the ability to read data values.

UPDATE

affects the ability to change data values.

* permType="DENY" | "GRANT" | "NONE"

specifies addition of a direct denial, addition of a direct grant, or removal of an existing direct access control.

* table="string"

specifies the table name.

repAllAcsTable Action

Replaces all access controls for a table.

Lua Syntax

Expand allCollapse all
results, info = s:accessControl_repAllAcsTable{
acs
={{
required parameter caslib="string",
description="string",
filter="string",
identity="string",
required parameter identityType="GROUP" | "GUEST" | "USER",
required parameter permission="ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE",
required parameter permType="DENY" | "GRANT" | "NONE",
required parameter table="string"
}, {...}}
}

Parameter Descriptions

acs={{repsettable-1} <, {repsettable-2}, ...>}

specifies the replacement access controls.

The repsettable value can be one or more of the following:

* caslib="string"

specifies the caslib name.

description="string"

specifies the purpose of the access control.

filter="string"

specifies a row-level filter that limits a direct grant of the Select permission on a table. The expression can include identity-based substitutions (for example, SUB::SAS.Userid).

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "USER"

specifies the type of identity that is associated with the access control.

DefaultUSER
* permission="ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE"

specifies the permission type.

DefaultSELECT
ALTERTABLE

affects the ability to change the properties or structure of a table.

CREATETABLE

affects the ability to save (persist) a table.

DELETE

affects the ability to delete rows.

DELETESOURCE

affects the ability to delete a source table.

DROPTABLE

affects the ability to unload a table.

INSERT

affects the ability to add rows.

LIMITEDPROMOTE

affects the ability to copy a session scope table to global scope within the same caslib.

MANAGEACCESS

affects the ability to set access controls.

READINFO

affects the ability to view and traverse objects.

SELECT

affects the ability to read data values.

UPDATE

affects the ability to change data values.

* permType="DENY" | "GRANT" | "NONE"

specifies addition of a direct denial, addition of a direct grant, or removal of an existing direct access control.

* table="string"

specifies the table name.

repAllAcsTable Action

Replaces all access controls for a table.

Python Syntax

Expand allCollapse all
results=s.accessControl.repAllAcsTable(
acs
=[{
required parameter "caslib":"string",
"description":"string",
"filter":"string",
"identity":"string",
required parameter "identityType":"GROUP" | "GUEST" | "USER",
required parameter "permission":"ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE",
required parameter "permType":"DENY" | "GRANT" | "NONE",
required parameter "table":"string"
}<, {...}>]
)

Parameter Descriptions

acs=[{repsettable-1} <, {repsettable-2}, ...>]

specifies the replacement access controls.

The repsettable value can be one or more of the following:

* "caslib":"string"

specifies the caslib name.

"description":"string"

specifies the purpose of the access control.

"filter":"string"

specifies a row-level filter that limits a direct grant of the Select permission on a table. The expression can include identity-based substitutions (for example, SUB::SAS.Userid).

"identity":"string"

specifies the user or group.

* "identityType":"GROUP" | "GUEST" | "USER"

specifies the type of identity that is associated with the access control.

DefaultUSER
* "permission":"ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE"

specifies the permission type.

DefaultSELECT
ALTERTABLE

affects the ability to change the properties or structure of a table.

CREATETABLE

affects the ability to save (persist) a table.

DELETE

affects the ability to delete rows.

DELETESOURCE

affects the ability to delete a source table.

DROPTABLE

affects the ability to unload a table.

INSERT

affects the ability to add rows.

LIMITEDPROMOTE

affects the ability to copy a session scope table to global scope within the same caslib.

MANAGEACCESS

affects the ability to set access controls.

READINFO

affects the ability to view and traverse objects.

SELECT

affects the ability to read data values.

UPDATE

affects the ability to change data values.

* "permType":"DENY" | "GRANT" | "NONE"

specifies addition of a direct denial, addition of a direct grant, or removal of an existing direct access control.

* "table":"string"

specifies the table name.

repAllAcsTable Action

Replaces all access controls for a table.

R Syntax

Expand allCollapse all
results <– cas.accessControl.repAllAcsTable(s,
acs
=list( list(
required parameter caslib="string",
description="string",
filter="string",
identity="string",
required parameter identityType="GROUP" | "GUEST" | "USER",
required parameter permission="ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE",
required parameter permType="DENY" | "GRANT" | "NONE",
required parameter table="string"
) <, list(...)>)
)

Parameter Descriptions

acs=list( list(repsettable-1) <, list(repsettable-2), ...>)

specifies the replacement access controls.

The repsettable value can be one or more of the following:

* caslib="string"

specifies the caslib name.

description="string"

specifies the purpose of the access control.

filter="string"

specifies a row-level filter that limits a direct grant of the Select permission on a table. The expression can include identity-based substitutions (for example, SUB::SAS.Userid).

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "USER"

specifies the type of identity that is associated with the access control.

DefaultUSER
* permission="ALTERTABLE" | "CREATETABLE" | "DELETE" | "DELETESOURCE" | "DROPTABLE" | "INSERT" | "LIMITEDPROMOTE" | "MANAGEACCESS" | "READINFO" | "SELECT" | "UPDATE"

specifies the permission type.

DefaultSELECT
ALTERTABLE

affects the ability to change the properties or structure of a table.

CREATETABLE

affects the ability to save (persist) a table.

DELETE

affects the ability to delete rows.

DELETESOURCE

affects the ability to delete a source table.

DROPTABLE

affects the ability to unload a table.

INSERT

affects the ability to add rows.

LIMITEDPROMOTE

affects the ability to copy a session scope table to global scope within the same caslib.

MANAGEACCESS

affects the ability to set access controls.

READINFO

affects the ability to view and traverse objects.

SELECT

affects the ability to read data values.

UPDATE

affects the ability to change data values.

* permType="DENY" | "GRANT" | "NONE"

specifies addition of a direct denial, addition of a direct grant, or removal of an existing direct access control.

* table="string"

specifies the table name.

Last updated: July 15, 2026