topic Re: Management Console, No unrestricted users in Administration and Deployment

Management Console, No unrestricted users

JLun — Fri, 09 Feb 2018 09:27:44 GMT

Hi all,

first time poster and new to Management Console, so I may need steps you find obvious to be spelled out for me.

I recently created a user and stupidly removed WriteMetadata permissions. The user is now Read-Only and can't be updated or deleted. (Yes, I am embarrassed.)

The problem is that none of the three administrators have unrestricted permissions and none of us can grant ourselves or the others these permissions in the way described in the manual. There is no one with enough permissions to change/delete this user or to create a new unrestricted admin.

This is not just a problem with this user (since the profile wasn't working) but also a potential problem for the future.

Is there a way to fix this? I have looked in the documentation/manual and searched the previously answered questions about Read-only users but for the above reasons, the advice on those are not working in this case: there is no Unrestricted admin and none of us have permission to grant Unrestriction.

Can anyone help?

Re: Management Console, No unrestricted users

Criptic — Fri, 09 Feb 2018 09:34:27 GMT

Do you have access to the sasadm account?

Re: Management Console, No unrestricted users

JLun — Fri, 09 Feb 2018 10:16:23 GMT

Do you mean: can I log in as SAS Administrator (rather than as my own profile, which has (restricted) administrator permissions?)

If so, then no. I don't have the password for the SAS Administrator account but I will ask if any of the two other administrators do. I can see that this account does indeed have unrestricted permissions so, given that any of us actually can log into it, this might solve my problem!

(I may return with the question: So, none of the administrators know the password to the Administrator account. What do we do? But that is a separate question.)

Thank you!

Re: Management Console, No unrestricted users

nhvdwalt — Fri, 09 Feb 2018 10:24:32 GMT

Is your sasadm account a SAS internal account (@saspw) or OS/AD/LDAP account ?

Re: Management Console, No unrestricted users

CHandberg — Fri, 09 Feb 2018 10:24:46 GMT

Hi...

Go to this file \SAS\Config\Lev1\SASMeta\MetadataServer\adminUsers.txt and insert your user. Restart the metadataserver and you will be able to log on to SMC and grant the permissions needed.

Remember to remove your user from the file (and restart the metadataserver) when you're done...

Re: Management Console, No unrestricted users

nhvdwalt — Fri, 09 Feb 2018 10:26:44 GMT

@CHandberg is correct.

Just remember to add an asterisk ( * ) in from of your user to make it an unrestricted account.