Architecting, installing and maintaining your SAS environment

SASAppCustom for a custom metadata group

Accepted Solution Solved
Reply
Contributor
Posts: 47
Accepted Solution

SASAppCustom for a custom metadata group

Hi all

 

I am stuck and need a magic wand today.

We are working with highly restricted data, for which we had to set up a seperate ringfenced work area, storage etc.

I was advised by SAS Tech Support to create a new custom Workspace Server for them, and then set up separate Metadata User profiles. 

 

Requirements:

Separate Workspace Server

Separate Windows dataset folder located on separate file server

Separate Windows AD User Groups x 2 (LibraAdmins + LibraUsers)

Separate /SASWork folder defined in config file

 

Implementation:

Restrict access to all other SAS Users / SAS Groups  in Metadata to this location and allow only the 2 Groups listed above access to the new Workspace Server SASAppLibra.

 

I have now set up SASAppLibra.

How do I proceed from here to grant access to the 2 User Groups to this SASApp, and restrict all other Groups from seeing / accessing SASAppLibra?

 

Is there some documentation available anywhere on this?


Accepted Solutions
Solution
‎04-10-2017 08:47 AM
Trusted Advisor
Posts: 1,319

Re: SASAppCustom for a custom metadata group

Hi There,

 

I'd spend some time on setting up your access using ACTs. Have a read through the SAS documentation to understand how this can be achieved http://support.sas.com/documentation/cdl/en/mcsecug/64770/HTML/default/viewer.htm#about.htm

 

You may also like to read @CecilyHoffritz's 2011 SAS Global Forum paper, Best Practice Implementation of SAS® Metadata Security at Customer Sites in Denmark: http://support.sas.com/resources/papers/proceedings11/376-2011.pdf

 

Furthermore @angieh presented at SAS Global Forum last week a paper that you may find helpful, Getting Started with Designing and Implementing a SAS 9.4 Metadata and File System Security Design: https://communities.sas.com/t5/SAS-Global-Forum-2017/If-you-are-interested-in-SAS-Metadata-Security-...

 

Deny broadly, grant selectively... as suggested at http://support.sas.com/documentation/cdl/en/mcsecug/64770/HTML/default/viewer.htm#p12rsiojalls90n17o...

 

Kind Regards,

Michelle

View solution in original post


All Replies
Solution
‎04-10-2017 08:47 AM
Trusted Advisor
Posts: 1,319

Re: SASAppCustom for a custom metadata group

Hi There,

 

I'd spend some time on setting up your access using ACTs. Have a read through the SAS documentation to understand how this can be achieved http://support.sas.com/documentation/cdl/en/mcsecug/64770/HTML/default/viewer.htm#about.htm

 

You may also like to read @CecilyHoffritz's 2011 SAS Global Forum paper, Best Practice Implementation of SAS® Metadata Security at Customer Sites in Denmark: http://support.sas.com/resources/papers/proceedings11/376-2011.pdf

 

Furthermore @angieh presented at SAS Global Forum last week a paper that you may find helpful, Getting Started with Designing and Implementing a SAS 9.4 Metadata and File System Security Design: https://communities.sas.com/t5/SAS-Global-Forum-2017/If-you-are-interested-in-SAS-Metadata-Security-...

 

Deny broadly, grant selectively... as suggested at http://support.sas.com/documentation/cdl/en/mcsecug/64770/HTML/default/viewer.htm#p12rsiojalls90n17o...

 

Kind Regards,

Michelle

Contributor
Posts: 47

Re: SASAppCustom for a custom metadata group

Posted in reply to MichelleHomes

Hi Michelle

 

Yes - it seems ACT's will be the solution here, and I agree with the policy of Deny broadly and grant selectively.

Thanks for your help.

Smiley Happy

Trusted Advisor
Posts: 1,319

Re: SASAppCustom for a custom metadata group

My pleasure. Please mark the question as solved so that it may help others in future too.

 

Kind Regards,

Michelle

☑ This topic is solved.

Need further help from the community? Please ask a new question.

Discussion stats
  • 3 replies
  • 205 views
  • 4 likes
  • 2 in conversation