SAS Viya Identities service

[alexandros]

Hello,

is there any way to allow access only in certain ldap groups in SAS VIYA 3.4?

[Eric_D · Accepted solution]

So what I would point you to is using the Object filter for Users

There is an older example/explanation here https://blogs.sas.com/content/sgf/2017/12/06/ldap-basics-for-the-sas-viya-administrator/ 

An example might be like: 

objectFilter=(&(objectClass=user) (| (memberOf=cn=ViyaUsers,cn=groups,cn=accounts,dc=customer,dc=com ) (memberOf=cn=OtherUsers,cn=groups,cn=accounts,dc=customer,dc=com ) ) )

So this object filter would return only end users who are of object class "user" AND EITHER members of the LDAP group "ViyaUsers" OR "OtherUsers"  (Notice the user of & and |, for AND and OR)