Web servers usually serve the requests with something like nouser/nogroup or nobody/nobody. Only the core process is started by root in order to use the privileged (< 1024) port 80/443.
And, as the others said, the install user (and the one who will own the metadata server process) must not be root.
The SAS Users Group for Administrators (SUGA) is open to all SAS administrators and architects who install, update, manage or maintain a SAS deployment.