Our users need to connect to Workspace server etc using SAS EG. How to grant access to the users on the server without adding them under server administrators? Thanks in advance.
The users need to be part of a group that has READMETADATA access to the SAS Workspace. And if using their own host account to authenticate, that account needs "Log on as a batch job" privileges (Windows-specific) on the OS. They could be part of an Active Directory group with that right.
Others in the group might share their own best practices.
I think you covered all the bases on a great simple way Chris 🙂
Thank you. they also need to write. I guess There shoud be an option to write also. Let me try this out. Thanks again.
They don't need WRITE on the SAS Workspace definition in order to use it. READMETADATA should be enough to read the server definition and allow them to connect. Any work they do while connected (writing programs, creating data) is NOT governed by the permissions on this server definition.
If you have administered libraries in metadata that they need to add content to, they would need WRITE and WRITEMETADATA on those.
Define a security approach as documented at http://support.sas.com/documentation/cdl/en/bisecag/67045/HTML/default/viewer.htm#titlepage.htm
Users meaning developers. They are writing code saving and running on stored process servers etc. I assume they need some kind of write access? does readmetadata permission gives that kind of ability? sorry I am new so, kind of dumb question?
Thanks in advance.
Metadata permissions are stored per object for users/groups.
So you have a group of users that develop apps.
Their group should have READMETADATA defined in the Authorization panel of the Workspace Server (that's all they need so that their Enterprise Guide - or SAS Studio - can connect to it),
but they will need WRITEMETADATA and WRITE permissions on other objects (libraries, folders)
would they be able to run stored procs with this setup? Thanks in advance.
If you grant them access to the stored process server and the stored processes, yes.
Unfortunately none of these are working correctly. They are able to make connection with granting access to workspace server by giving READMETADATA. Then EG shows readonly when a program is opened locally. Appreciae any help.
Hi there,
when you say "EG shows read only", what exactly do you mean?
Are users trying to access tables in EG and get an error message? If so, what kind of error message?
Do you receive an authorization error right at the beginning when a user logs on?
Could you provide some more info please?
If you look at the Metadata Server log and Object Spawner log, do you see any error messages?
Thanks
By "program", do you mean a (extension .sas) SAS program (text file) or an Enterprise Guide project file?
Where are the files stored (local on the PC, in metadata, in "Files" on the workspace server, on a networked drive)?
How do you notice that the file is read-only (messsage when opening, or error when trying to save)?
The SAS Users Group for Administrators (SUGA) is open to all SAS administrators and architects who install, update, manage or maintain a SAS deployment.
SAS technical trainer Erin Winters shows you how to explore assets, create new data discovery agents, schedule data discovery agents, and much more.
Find more tutorials on the SAS Users YouTube channel.