Reset the SAS Installer Account

[japsas100]

Hello,

As per the auditing requirement, we need to change the sas external account (sas installer account: sas) password on the regularly basis.

Is this ok to change the installer account password on regularly basis? Can you please also share the steps, we are using unix env.

[SASKiwi]

Best practice is for the SAS installer account to be used for installing and configuring SAS software only. If this is how you use it I don't see any problem with resetting it regularly.

On the other hand, if you are using it for any SAS server processes however changing it on a regular basis would be problematic. The SAS Deployment Manager provides a way of resetting certain SAS service accounts' passwords but it isn't foolproof. 

[Anand_V]

Hi @japsas100 

You can reach out to IT to reset the password based on if it's a local or LDAP account. As long as it's used only for start/stop SAS services, owning the config/home directories/files and NOT a part of SMC it should not be a problem to change the password.

[Mahe001]

Yes, It is okay to change the password for the installer accounts. Just remember, if you are on a grid environment, use the same password on all the servers. And if the requirement is to be done on a regular intervals, keep a pattern so that you would not mess up remembering. Coming to frequency- you can change it frequently like once in a month. And for the point- How to change, you can do it as easily as u do for any other user on a Linux server using the command- passwd . Hope this is useful.

[sandeeppajni2]

Hi @japasas100,

You can get set a policy to use SAS account only with the sudo access to it. This is how it would be easier adhere to the auditing requirements, without changing the SAS account password, but just with changing your account passwords.