This webinar took place on Monday 9th October 2017, Presented by David Stern, SAS and Paul Homes, Metacoda.
Please see here for a link to the recording of the webinar
Here are some useful links that were referenced as part of the session:
Metacoda Websites:
https://www.metacoda.com/en/products/security-plug-ins/testing-framework/
https://www.metacoda.com/
Paul Homes Blog referencing GEL security rules with Metacoda security tests:
https://platformadmin.com/blogs/paul/2017/06/sas-gel-security-rules-with-metacoda-security-tests/
Useful Links from David:
Golden Rules for Security Model Design
https://communities.sas.com/t5/SAS-Communities-Library/Golden-Rules-for-Security-Model-Design/ta-p/3...
https://communities.sas.com/t5/SAS-Communities-Library/Golden-Rules-for-Security-Model-Design-part-2...
https://communities.sas.com/t5/SAS-Communities-Library/Golden-Rules-for-Security-Model-Design-part-3...
https://communities.sas.com/t5/SAS-Communities-Library/Golden-Rules-for-Security-Model-Design-part-4...
https://communities.sas.com/t5/SAS-Communities-Library/Golden-Rules-for-Security-Model-Design-part-5...
Five papers on Recommended SAS 9.4 Security Model Design
https://communities.sas.com/t5/SAS-Communities-Library/Five-papers-on-Recommended-SAS-9-4-Security-M...
https://communities.sas.com/t5/SAS-Communities-Library/Five-papers-on-Recommended-SAS-9-4-Security-M...
Source for the Authorization Decision Flowchart: SAS(R) 9.2 Intelligence Platform: Security Administration Guide > Authorization > Authorization Mode...
Checklist of SAS Platform Administration Tasks
https://communities.sas.com/t5/SAS-Communities-Library/Checklist-of-SAS-Platform-Administration-Task...
We would also like to credit Cecily Hoffritz from SAS Denmark for the quiz questions used in the live webinar
Summary of Questions and Answers raised during the webinar:
1/ Does it matter what version of SAS you are on to be able to use the Metacoda add-ons?
Metacoda Plug-ins can be used with SAS versions 9.2, 9.3 and 9.4, including all maintenance releases such as the most recent SAS 9.4 M5. They can also be used with any SAS Solutions based on the SAS 9 metadata platform, such as SAS Visual Analytics.
2/ How long does it take to install / configure / test the add-ons?
Installing Metacoda Plug-ins in SAS Management Console is very simple and can be done in less than 5 minutes. A script for best practice testing is supplied so you can start doing best practice testing immediately using the Test Runner plug-in. The best practices test script can also be customised if you use any alternative approaches (such as the combined Baseline ACTs and supplemental ACEs as seen in the SAS documentation).
Having installed the interactive Metacoda Plug-ins in SAS Management Console you can immediately start exporting implementation tests from the various Reviewers and run those tests with the Test Runner plug-in.
If you want to schedule exports and tests in batch then you can install the Metacoda Plug-ins Batch Interface. This takes a little more time to install, and we often help our customers the first time they do this. It is usually installed and running within 1-2 hours.
The best practice tests and any exported implementation tests can also be customised. Depending on the level of customisations you want to do, this can take anything from a few minutes upwards. Support is of course available from Metacoda if you need it.
If you'd like to see for yourself how quick and easy it is to install you can register for a 30 day free evaluation at https://www.metacoda.com/en/evaluation
3/ Is it possible to export XML results in batch mode? ..on scheduled basis..
Using the Metacoda Plug-ins Batch Interface you can do the following:
- Batch export of HTML reports for documentation of a Metadata Security Implementation
- Batch export of Metacoda Security Test XML scripts to be used for implementation testing
- Batch testing using Metacoda Security Test XML scripts, including best practices tests and/or implementation tests
The results of batch testing can be generated in HTML and/or text format. You can also choose to send an email alert if test failures occur and, if required, on test success too (so you know the tests have run).
As I mention at the end of the webinar recording, the batch operations can also be combined. For example, the batch export of implementation tests from a test environment to run against a production environment with the goal of ensuring consistency between the environments. You could also do this between versions during migration, such as export from SAS 9.3 to test against SAS 9.4.
If you have any other questions or comments regarding this webinar, please do not hesitate to contact me:
caroline.scottow@sas.com
