02-25-2016 04:22 PM
Our users need to connect to Workspace server etc using SAS EG. How to grant access to the users on the server without adding them under server administrators? Thanks in advance.
02-25-2016 04:28 PM
The users need to be part of a group that has READMETADATA access to the SAS Workspace. And if using their own host account to authenticate, that account needs "Log on as a batch job" privileges (Windows-specific) on the OS. They could be part of an Active Directory group with that right.
Others in the group might share their own best practices.
02-25-2016 05:03 PM
They don't need WRITE on the SAS Workspace definition in order to use it. READMETADATA should be enough to read the server definition and allow them to connect. Any work they do while connected (writing programs, creating data) is NOT governed by the permissions on this server definition.
If you have administered libraries in metadata that they need to add content to, they would need WRITE and WRITEMETADATA on those.
02-25-2016 04:54 PM
Define a security approach as documented at http://support.sas.com/documentation/cdl/en/bisecag/67045/HTML/default/viewer.htm#titlepage.htm
02-25-2016 10:29 PM
Users meaning developers. They are writing code saving and running on stored process servers etc. I assume they need some kind of write access? does readmetadata permission gives that kind of ability? sorry I am new so, kind of dumb question?
Thanks in advance.
02-26-2016 01:58 AM
Metadata permissions are stored per object for users/groups.
So you have a group of users that develop apps.
Their group should have READMETADATA defined in the Authorization panel of the Workspace Server (that's all they need so that their Enterprise Guide - or SAS Studio - can connect to it),
but they will need WRITEMETADATA and WRITE permissions on other objects (libraries, folders)
02-26-2016 04:16 PM
If you grant them access to the stored process server and the stored processes, yes.
02-26-2016 11:43 AM
03-08-2016 11:22 AM
Unfortunately none of these are working correctly. They are able to make connection with granting access to workspace server by giving READMETADATA. Then EG shows readonly when a program is opened locally. Appreciae any help.
03-08-2016 11:30 AM
when you say "EG shows read only", what exactly do you mean?
Are users trying to access tables in EG and get an error message? If so, what kind of error message?
Do you receive an authorization error right at the beginning when a user logs on?
Could you provide some more info please?
If you look at the Metadata Server log and Object Spawner log, do you see any error messages?
03-09-2016 01:55 AM
By "program", do you mean a (extension .sas) SAS program (text file) or an Enterprise Guide project file?
Where are the files stored (local on the PC, in metadata, in "Files" on the workspace server, on a networked drive)?
How do you notice that the file is read-only (messsage when opening, or error when trying to save)?