topic Re: Extracting SAS metadata folder list ans group permissions in Administration and Deployment

Extracting SAS metadata folder list ans group permissions

Sajid01 — Tue, 09 Jun 2020 18:30:04 GMT

Hello
Is there a way using sas code one can extract the list of folders in the metadataserver and the permissions which different groups have.
We have our stored processes organized into different folders in the SMC (Folders plugin).
The information can be seen in the SAS Management Console.
I was wondering if this information can be extracted using sas code. I know the list of stored processes canbe obtained but what I am interested in is information about which group has what access to these stored processes.

Re: Extracting SAS metadata folder list ans group permissions

JackHamilton — Tue, 09 Jun 2020 18:39:05 GMT

You might look at the Metacoda plug-ins for the SAS Management Console to see if they can provide the report you need.

I have a new PC and the SMC hasn't been installed yet, so I can't check this myself, but I know Metacoda provides some security reporting in a better fashion than the plain SMC. Some of the tools are free.

Re: Extracting SAS metadata folder list ans group permissions

gwootton — Tue, 09 Jun 2020 20:03:46 GMT

Take a look at %MDSECDS Security Report Macro.

Re: Extracting SAS metadata folder list ans group permissions

MichelleHomes — Tue, 09 Jun 2020 22:46:53 GMT

Thanks @JackHamilton for mentioning Metacoda Plug-ins. 😊

@Sajid01, if you're after a fast and visual way to see the group permissions on a SAS metadata folder (or any type of SAS metadata object), then Metacoda Object Permissions Explorer provides this in a few clicks. Using this plug-in, you can look at a single object (folder, library, stored process, report etc.) and review the effective permissions on that object across multiple identities (users and/or groups). If you want to delve into how that permission is set then the Metacoda Permissions Tracer helps you to easily discover the source of effective permissions on the object for an identity (user and/or group).

There are some example blog posts that describe how these plug-ins help answer the question who has access and how and there is also reporting functionality provided:

Feel free to experience it yourself in your own environment with a free 30 day evaluation. It's a 5 minute installation (if that) on the SAS Management Console client.

Kind Regards,

Michelle