An identity hierarchy specifies a list of identities and the order of precedence of those identities. Which listing of identities is ranked from highest priority to lowest priority?

Question

Options

• AUser, direct group, indirect group, SASUSERS, PUBLIC
• BUser, SASUSERS, PUBLIC,directgroup, indirect group
• CSASUSERS, PUBLIC, User, direct group, indirect group
• Ddirect group, indirect group, User, PUBLIC, SASUSERS

• A
  92% (23)
• C
  4% (1)
• D
  4% (1)

Explanation

Option A is correct because SAS resolves permissions from most specific to least specific identity. An individual User is the most uniquely identifiable, followed by direct group membership (explicitly assigned), then indirect group (inherited via nested groups), then SASUSERS (all authenticated SAS users), and finally PUBLIC (everyone, including unauthenticated users).

Why the distractors fail:

• B incorrectly elevates SASUSERS and PUBLIC above direct and indirect groups - broader identities should never outrank narrower group memberships.
• C places SASUSERS and PUBLIC at the top, which inverts the entire logic - the broadest identities have the least specificity and therefore the lowest priority.
• D puts groups ahead of the individual User, and also swaps PUBLIC and SASUSERS (PUBLIC must always be last).

Memory tip: Think of a bull's-eye target - you are the center (User), surrounded by rings that get progressively broader: your direct groups, indirect groups, all SAS users, then everyone on Earth. The closer to the center, the higher the priority.

No community discussion yet for this question.