Migrate Metadata users

[mkiran]

we are in the process of upgrading sas 9.6 to 9.8 and have ~1000 metadata users, what would be the best approach to migrate them automatically to the new environment without creating them manually on the new server.

We do have other metadata to migrate but I am not sure metadata migration would bring the user accounts as well. please suggest.

[gwootton]

If you perform an upgrade in place, your users and groups would remain.

If you are deploying a new 9.4 M8 environment and migrating during deployment using the SAS Migration Utility (SMU), users and groups are included in that migration. There are constraints on when you can use migration:

High-Level SAS Migration Requirements
https://go.documentation.sas.com/doc/en/bicdc/9.4/bimig/n01019intelplatform00migrate.htm

What Can Be Migrated?
https://go.documentation.sas.com/doc/en/bicdc/9.4/bimig/n01018intelplatform00migrate.htm

If you have already deployed 9.4 M8 or otherwise do not want to use the migration utility, you can use promotion to export your users and groups from your old environment, and import them into the new environment.

Introduction to the Promotion Tools - Types of Objects that can be Promoted
https://go.documentation.sas.com/doc/en/bicdc/9.4/bisag/p04l8c3fo8tpyhn103dps7pxvru2.htm#p1oik8uxj0e...

[mkiran]

@gwootton : Documentaion doesn't say we can migrate users from User Manager plugin from SMC, is there any specific doc you can suggest?.

We failed to create the export package from previous environment because of previous Admins lost internal database credentials and it is the single server. Can you suggest if we can create only metadata using SMU?.

[gwootton · Accepted solution]

You can promote (use SMC export/import or batch export/import tools) users and groups, but not stored credentials, so those would need to be readded in the new environment.

You cannot promote from the User Manager plugin, In SMC you'd go to the folders plugin and export the folder /System/Security. From the documentation linked:

"You can also promote security objects (users, user groups, roles, and access control templates), as well as all of the server types that can be registered in metadata. Virtual folders called Security and Servers are displayed under the System folder in the SAS Folders tree in SAS Management Console for use in promoting these objects."

Introduction to the Promotion Tools - Types of Objects that can be Promoted
https://go.documentation.sas.com/doc/en/bicdc/9.4/bisag/p04l8c3fo8tpyhn103dps7pxvru2.htm#p1oik8uxj0e...