How to change SAS installer account?

[SASWayne]

We have two SAS9.4M5 environments test and prod running on windows with same installer account sas-service.
Now we'd like to have two separate service accounts for test and prod called sas-servicetest and sas-serviceprod.
Could someone help me with the steps on changing the installer account?
TIA

[AnandVyas]

Hi @SASWayne

I don’t think there is any documented approach to change the installer account. I would suggest you to check with SAS Technical support by emailing them to support@sas.com

[Kurt_Bremser · Accepted solution]

The SAS installer account is also used to start basic services, where it is often necessary to be the owner of certain files. Since the account was used during installation, this is guaranteed.

So, basically, one SAS installation -> one SAS installer account.

To separate between a test and prod environment, you do not need separate SAS installations (unless you also physically separate the SAS servers), but you use separate definitions of contexts in a single metadata environment.

[SASWayne]

Thank you for your response Kurt.
I totally agree with you, but we require this change to comply with company IT policy.

Is there any work around possibly to do this?

[Kurt_Bremser]

If your company requires this kind of (totally unnecessary, believe me) separation, you best run two separate servers.

Keep in mind that this would force you to have two installations in parallel, including the web application stack. How you keep those two running without interfering with each other (on Windows, to boot!), I have no idea.

Get some real IT people whose brains have not been burned through by prolonged exposure to crapware (Windows).

[Kurt_Bremser]

Mind that the installer account is not used to run SAS software (with the exception of the metadata server and the web application infrastructure).

Workspace servers are run with the logged-in user's account, pooled servers (e.g. stored process servers) with sassrv. These are relevant security-wise.