SAC Roles - Restrict usergroup from drag and drop function (personal files) in SAC

[VirajSaha]

Hello Experts,

We have a requirement to restrict a set of end user group to only allow use of per-approved content in SAC. A user from this group should not be allowed to create self service stories from personal excel/ csv/ text files. Though they can create stories from shared connections and models. They should always use provided models, datasets and live connections.

We understand that self service ("I'm feeling lucky" or "prepare dataset"- drag and drop) is one of the powerful suit of SAC. Not sure if there is any possibility to remove this function.
"BI Content Viewer" is the most restricted among all and it restricts drag and drop and upload of personal files. Though this also restricts model creation/ story creations from existing objects.

We understand that we may need to create a custom role for this, though not sure if we can restrict based on any available role property.

Thanks,

Viraj

[DebjitSingha · Accepted solution]

Hello viraj_saha,

If you want to restrict users from allowing personal file upload for model and story creation, then you can uncheck "Personal Data Acquisition" from individual roles assigned to user/ team. Please be informed that access in SAC is always a union of all roles, so you need to make sure this unchecked in all roles assigned to user/ team.

Best way to approach this would be to create a custom role based on BI Content Creator template and then uncheck "Personal Data Acquisition" as below:

BI Content template-

You can further restrict user from uploading external content by Public Files, Private Files and External Content as well. Though for your requirement "Personal Data Acquisition" should be enough. Beside acquired modes are shareable object, so if they are not shared then they wont be visible or accessed.

If find above info helpful.

Viewers - If you find above information helpful, feel free to up-vote.

Thanks,

Debjit