Architecting, installing and maintaining your SAS environment

Using SAS Enterprise Guide security question

Reply
Occasional Contributor
Posts: 5

Using SAS Enterprise Guide security question

Our users need to connect to Workspace server etc using SAS EG.  How to grant access to the users on the server without adding them under server administrators?  Thanks in advance.

Community Manager
Posts: 2,772

Re: Using SAS Enterprise Guide security question

The users need to be part of a group that has READMETADATA access to the SAS Workspace.  And if using their own host account to authenticate, that account needs "Log on as a batch job" privileges (Windows-specific) on the OS.  They could be part of an Active Directory group with that right.

 

Others in the group might share their own best practices.

Trusted Advisor
Posts: 1,141

Re: Using SAS Enterprise Guide security question

I think you covered all the bases on a great simple way Chris Smiley Happy 

Occasional Contributor
Posts: 5

Re: Using SAS Enterprise Guide security question

Thank you. they also need to write. I guess There shoud be an option to write also.  Let me try this out. Thanks again.

Community Manager
Posts: 2,772

Re: Using SAS Enterprise Guide security question

They don't need WRITE on the SAS Workspace definition in order to use it.  READMETADATA should be enough to read the server definition and allow them to connect.  Any work they do while connected (writing programs, creating data) is NOT governed by the permissions on this server definition.

 

If you have administered libraries in metadata that they need to add content to, they would need WRITE and WRITEMETADATA on those.

Valued Guide
Posts: 3,208

Re: Using SAS Enterprise Guide security question

Define a security approach as documented at http://support.sas.com/documentation/cdl/en/bisecag/67045/HTML/default/viewer.htm#titlepage.htm  

---->-- ja karman --<-----
Occasional Contributor
Posts: 5

Re: Using SAS Enterprise Guide security question

Users meaning developers.  They are writing code saving and running on stored process servers etc.  I assume they need some kind of write access?  does readmetadata permission gives that kind of ability?  sorry I am new so, kind of dumb question?

Thanks in advance.

Super User
Posts: 6,977

Re: Using SAS Enterprise Guide security question

Metadata permissions are stored per object for users/groups.

 

So you have a group of users that develop apps.

Their group should have READMETADATA defined in the Authorization panel of the Workspace Server (that's all they need so that their Enterprise Guide  - or SAS Studio - can connect to it),

but they will need WRITEMETADATA and WRITE permissions on other objects (libraries, folders)

---------------------------------------------------------------------------------------------
Maxims of Maximally Efficient SAS Programmers
Occasional Contributor
Posts: 5

Re: Using SAS Enterprise Guide security question

would they be able to run stored procs with this setup?  Thanks in advance.

Super User
Posts: 6,977

Re: Using SAS Enterprise Guide security question

If you grant them access to the stored process server and the stored processes, yes.

---------------------------------------------------------------------------------------------
Maxims of Maximally Efficient SAS Programmers
Super User
Posts: 5,260

Re: Using SAS Enterprise Guide security question

I would just like to add the possibility to configure IWA. It's user friendly and removes the requirement for the log on as batch job privilege. Many sites don't like granting this.
Data never sleeps
Occasional Contributor
Posts: 5

Re: Using SAS Enterprise Guide security question

Unfortunately none of these are working correctly.  They are able to make connection with granting access to workspace server by giving READMETADATA.  Then EG shows readonly when a program is opened locally.  Appreciae any help.

SAS Super FREQ
Posts: 291

Re: Using SAS Enterprise Guide security question

Hi there,

 

when you say "EG shows read only", what exactly do you mean?

 

Are users trying to access tables in EG and get an error message? If so, what kind of error message?

Do you receive an authorization error right at the beginning when a user logs on?

Could you provide some more info please?

 

If you look at the Metadata Server log and Object Spawner log, do you see any error messages?

 

Thanks

 

 

Super User
Posts: 6,977

Re: Using SAS Enterprise Guide security question

By "program", do you mean a (extension .sas) SAS program (text file) or an Enterprise Guide project file?

Where are the files stored (local on the PC, in metadata, in "Files" on the workspace server, on a networked drive)?

How do you notice that the file is read-only (messsage when opening, or error when trying to save)?

---------------------------------------------------------------------------------------------
Maxims of Maximally Efficient SAS Programmers
Ask a Question
Discussion stats
  • 13 replies
  • 583 views
  • 1 like
  • 7 in conversation