If you want to register analytic store models from SAS^® applications such as Model Studio (SAS^® Visual Data Mining and Machine Learning and SAS^® Visual Text Analytics), SAS^® Visual Analytics, and SAS^® Studio to the common model repository, you must perform additional configuration steps with respect to setting file system directory permissions.

By default, CAS sessions run using the cas account. The CASHostAccountRequired custom group is a SAS^® Viya^® reserved group name, but it is not created during deployment. If you create a custom group with the ID CASHostAccountRequired, members of this group automatically run their CAS sessions under their own host account. Users within this group must have Read and Write permissions to caslib file system directory paths.

In order to register analytic store models and generate performance results, the ModelStore and ModelPerformanceData predefined caslibs are used. By default, the file system directories for these predefined caslibs are located within the /opt/sas/viya/config/data/cas/default/ directory. 

For example, for the ModelPerformanceData caslib, the default directory path is  /opt/sas/viya/config/data/cas/default/modelMonitorLibrary .

Note: The ModelPerformanceData caslib is available only for SAS Viya 3.4 and can be used only when the SAS Model Manager application is part of your installation.

Here is an example of how you can configure permissions for the file system directories used by the caslibs:

1. Create a host system group that contains the cas user account and the user accounts for the users who are in the CASHostAccountRequired custom group.
2. Replace the default sas group with the new host system group for both directories.
3. Grant Read and Write group permissions to the new host system group for the directories.

 Note: Users that have restrictive default file permissions (umask), might create models where their ASTORE files cannot be read or overwritten. If this is the case, you can consider setting the setgid bit on the caslib file system directories in order for the permissions and group ownership to be inherited from the parent directory.

Note: In a Windows environment the CASHostRequiredGroup custom group is not used.  However, the file system folder associated with a ModelStore caslib must have Read and Write access for users to register analytic store models.

For more information, see the following documentation:

• Configuring Data Libraries in SAS Model Manager: Administrator’s Guide
• The CASHostAccountRequired Custom Group in SAS Viya Administration: Identity Management
• User Accounts (Reference) in SAS Viya for Linux: Deployment Guide

The SAS article applies to SAS Viya 3.3 and 3.4 based deployments.