topic Re: List of all metadata users and the libnames that each one has access to in Administration and Deployment

List of all metadata users and the libnames that each one has access to

Maicfel — Wed, 07 Aug 2024 15:50:27 GMT

Can anyone help I need a list of all metadata users and the libnames that each one has access to, is it possible?

Re: List of all metadata users and the libnames that each one has access to

AhmedAl_Attar — Wed, 07 Aug 2024 16:12:13 GMT

Look into metacoda plug-in https://www.metacoda.com/en/metacoda-plug-ins/

hope this helps

Re: List of all metadata users and the libnames that each one has access to

carl_sommer — Wed, 07 Aug 2024 16:24:47 GMT

SAS provides the %MDSECDS macro to build a set of tables for requested objects and their associated permissions.

See SAS Help Center: Overview of the Security Report Macros.

I've not used the metacode plugin, but have heard great things about it.

Carl Sommer - SAS Technical Support

Re: List of all metadata users and the libnames that each one has access to

PaulHomes — Wed, 07 Aug 2024 22:48:16 GMT

Thanks @AhmedAl_Attar and @carl_sommer for mentioning Metacoda!

@Maicfel - we have some commercial Metacoda Plug-ins that can be installed into SAS Management Console to provide additional views of the SAS metadata security implementation that SAS platform administrators find useful. Of the various plug-ins that we provide, the ones that might provide the answer you are looking for are the Object Permissions Explorer (pick an object, like a library, and see all users/groups and the effective permissions/access they have on that object) and the Identity Permissions Explorer (pick a user/group and see a collection of objects, such as all libraries, and the effective permissions/access that user/group has on all those objects). These views can be exported into HTML and CSV formats. If you see a combination of permissions you don't expect then you can right click on a row to access the Permissions Tracer plug-in which will list all of the relevant permission settings, from ACEs and ACTs on the object and all of its parents, for that user and all of its groups, ordered in terms of precedence, with the definitive or deciding permissions highlighted so you can see what it driving the decision.

I have written a couple of blog posts about these specific plug-ins that might help:

Sneak Peek at our new Effective Permissions Explorers: https://platformadmin.com/blogs/paul/2012/04/effective-permissions-explorers-sneak-peek/
Tracing Permissions for SAS Metadata Security: https://platformadmin.com/blogs/paul/2016/03/tracing-permissions-sas-metadata-security/

If this is of interest, and you would like to try the software out in your own environment you can register for an free 30 day evaluation at https://www.metacoda.com/en/evaluation/ and, of course, if you would like to have a web meeting to see a demo I would be more than happy to help.

Re: List of all metadata users and the libnames that each one has access to

Maicfel — Mon, 12 Aug 2024 10:01:23 GMT

@PaulHomes Thank you for your quick response, I will check internally and if a positive answer comes back we will talk again. Thanks

Re: List of all metadata users and the libnames that each one has access to

Sajid01 — Fri, 16 Aug 2024 18:34:05 GMT

Hello @Maicfel
Did you get a chance to look here SAS Help Center: %MDSECDS Security Report Macro in particular please see if this macro can help you.

%mdsecds(identitynames="sasdemo", identitytypes="Person", membertypes="Library",
      perms="ReadMetadata");