topic Re: how to create a macro to create a new metadata user account and add it into one or more sas grou in SAS Programming

how to create a macro to create a new metadata user account and add it into one or more sas groups?

Tom2021 — Sat, 31 Jul 2021 04:19:40 GMT

Hi, could some help me or provide some sample code? We want to use it in Ansible automation to automatically generate user account, instead of sas management console. thanks

%macro meta_create_user(username, login=, memberof=);

for example

%macro meta_create_user(testuserFN testuserLN, login=testuser1, memberof=testgroup1); or

%macro meta_create_user(testuserFN testuserLN, login=lestuser1, memberof=(testgroup1,testgroup2));

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Patrick — Sat, 31 Jul 2021 07:01:00 GMT

@Tom2021 Before trying to write your own macro from scratch you might want to inspect what's already provided in the docu under User Import Macros.

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Tom2021 — Sat, 31 Jul 2021 22:21:42 GMT

thanks Patrick, but, i tried %MDUCHGLB User Import Macro that cannot add user into existing group; all users and groups should be new from ad/unix/other external. they cannot have same names in metadata repository. i like to do more investigation.

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

SASKiwi — Sat, 31 Jul 2021 22:55:17 GMT

@Tom2021 - Have you reviewed the whole process in @Patrick 's link? You need to run the macros that compare your external security data with SAS metadata, then only apply the changes that are found.

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

AllanBowe — Sun, 01 Aug 2021 08:26:21 GMT

To add a user to a group you can try this macro: https://core.sasjs.io/mm__adduser2group_8sas.html

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Kurt_Bremser — Sun, 01 Aug 2021 10:45:38 GMT

In the examples directory of the SAS installation, you can find two programs (importpw.sas and importad.sas) that synchronize the metadata either with the UNIX passwd/group files or an Active Directory (LDAP) source. They manage everything (adding users/groups, add in users to existing groups, apply changes to existing users/groups, remove groups or users).

We have used both programs as blueprints for our sync needs, and they work perfectly.

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Tom2021 — Sun, 01 Aug 2021 13:57:41 GMT

I found the macro files written by Andrea Defronzo on github as the link; Tested, it is good, but I am not sure we can use the programs without copyright issue. At bottom, it calls sas metadata interface function. The coding is complicated with groups of sas macros. it is hard to learn and modify to create our codes. GitHub - andrewdef/sas_metadata_x_ansible: Ansible task to create SAS metadata objects (libraries, folders, etc.) in the Metadata Server
Ansible task to create SAS metadata objects (libraries, folders, etc.) in the Metadata Server
metautil_create_user.sas (%macro metautil_create_user(user_name, display_name=, login=, member_of=);). It calls these macros: metautil_parse_object_string.sas, metautil_create_object.sas
metautil_create_directory.sas, util_get_nobs.sas

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Tom2021 — Sun, 01 Aug 2021 13:59:30 GMT

add the link: thx

GitHub - andrewdef/sas_metadata_x_ansible: Ansible task to create SAS metadata objects (libraries, folders, etc.) in the Metadata Server

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Tom2021 — Sun, 01 Aug 2021 14:11:17 GMT

thank you Allan. i will try your codes. I have a concern. if it is working, I believe, Can we use some of your sas files? it is hard to develop so many professional macros as a full module.. thx

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Tom2021 — Sun, 01 Aug 2021 14:14:45 GMT

thank you Kurt. in our case, we do not need to import information from ad or unix; I will read the sas code and will try to modify it. thx

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Tom2021 — Sun, 01 Aug 2021 14:18:21 GMT

thank you SASKivi, it is a full document. I read some and tried some. I will go further...thx

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Tom2021 — Sun, 01 Aug 2021 14:21:20 GMT

thank you Patrick. This is a good direction. it is a full document. I will read it again and try to figure out testing plan to fit our custom need. thx

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Kurt_Bremser — Sun, 01 Aug 2021 17:51:12 GMT

The programs consist of two parts: first extracting the user/group data from the source into a miniature database, and second creating a mirror base from the metadata, which is compared, resulting in a set of datasets for deleting, changing and adding metadata objects.

As long as you create the database correctly, the rest of the programs should work.

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Tom2021 — Mon, 02 Aug 2021 00:04:53 GMT

Thank you Allan,

I read and tested your macro code. it is beautiful. it worked very well to add an existing user into specified groups. Could I use your macro file mm_adduser2group.sas?

My outstanding question or task is to create a macro to create a new user with user name and login id.

In the same time, I will try another approach suggested in the communication thread to use bulk load and sas macro %mduchgbl. Finally, I will choose the simpler one.

Thank you again.

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

AllanBowe — Mon, 02 Aug 2021 06:15:17 GMT

Yes of course- all the macros in the sasjs/core repo are MIT open source
and available for commercial use.

Re: how to create a macro to create a new metadata user account and add it into one or more sas grou

Tom2021 — Tue, 03 Aug 2021 14:18:14 GMT

Now we have solution from Allan to add user to groups; But, we want advice or sample code to create a new user in code like %macro meta_create_user(testuserFN testuserLN, login=testuser1). the user will be added in DefaultAuth.

I ran sample code from metadata import and bulkload as below. But, i found the new user account has blank at authdomain. it should be DefaultAuth.

We tested the program to add it into a group but failed; even if we setup external identify on the group. it seems the bulkload is to load all external accounts into metadata but the objects cannot have same names inside metadata repository.

thx

/* purpose: create a new user with
name=testfirst0 testlast0,
loginid=testuser0 in DefaultAuth,
do not touch group
*/

/* Initialize the macro variables that create canonical tables. */
%mduimpc();

/* Create the person table. */
data &persontbla ;
%definepersoncols;
infile datalines delimiter=',' missover;
input keyid name description title;
datalines;
testuser0,testfirst0 testlast0,,
;

/* Create the phone table. */
data &phonetbla ;
%definephonecols;
infile datalines delimiter=',' missover;
input keyid phoneNumber phoneType;
datalines;
testuser0,,
;

/* Create the location table. */
data &locationtbla ;
%definelocationcols;
infile datalines delimiter=',' missover;
input keyid locationName locationType address city postalcode area
country;
datalines;
testuser0,,,,,,,
;

/* Create the email table. */
data &emailtbla ;
%defineemailcols;
infile datalines delimiter=',' missover;
input keyid emailAddr emailtype;
datalines;
testuser0,,
;

/* Create the idgrp table. */
data &idgrptbla ;
%defineidgrpcols;
infile datalines delimiter=',' missover;
input keyid name description grpType;
datalines;
;

/* Create the grpmems table. */
data &idgrpmemstbla;
%defineidgrpmemscols;
infile datalines delimiter=',' missover;
input grpkeyid memkeyid;
datalines;
;

/* Create the authdomain table. */
data &authdomtbla;
%defineauthdomcols;
infile datalines delimiter=',' missover;
input keyid authDomName;
datalines;
A001,DefaultAuth
;

/* Create the logins table. */
data &logintbla;
%definelogincols;
infile datalines delimiter=',' missover;
input keyid userid password authdomkeyid;
datalines;
testuser0,testuser0,,A001
;

/* Load the information from the work library into the metadata server. */
%mduimplb();