you learn something new everyday, did some ore reading on caslib. instead of libname blah blah authdomain = td ; I put... cas; libname blah blah authdomain = td ; and voila! it works. Confirmed connecting schema user is me! This is a biggie! Thanks for all the help! ... View more

This tool runs on Windows as well as Linux and AIX. ... View more

Hello @JackHamilton  Here are my thoughts on your problem 1. "We're upgrading from 9.4m5 to 9.4m7 later this year, and hope that will make the problem go away."      This version of SAS has the SAS EG 8.x and login manager is no more available in the SAS EG.. It is in the install directory (https://go.documentation.sas.com/doc/en/pgmsascdc/9.4_3.5/whatsdiff/p14d505czxwgqnn14rji2345ersx.htm).  2.For changing  login /Windows/AD passwords it is better to use the operating system utilities rather than SAS login manager.   As a corollary for default auth password should not be stored in the metadata. SAS does not need any users login passwords to be stored in the  metadata.   3.What remains is that user must be using login manager to store their database access passwords for various authdomains.    A good practice is to assign privileges/ access /roles using groups. There would be no need to store password in the metadata.   Following this practice there would be hardly any need to store passwords in the metadata. 4.Changing user behavior / practices is not easy. But you have a silvery lining. The move to a newer version of the SAS.  Suggest that make use of this opportunity and try doing away user password storage in metadata. ... View more

Thanks @DavidStern for your detailed article about Viya 4 logging. Adopting the EFK stack looks like a good move, I wasn't aware of Fluent ingestion agents before - only of its older sibling Logstash, ELK - this is clear and comprehensive. 🙂  ... View more

Golden rules are great. I have one question. If you create an additional hide ACT with a deny for RM for SASUSERS and the right rights for SAS Admin, System Services etc., if there a way to add this with a script on Unix? or do you need to apply it to every folder in Management Console? regards   Karolina Touwen ... View more

Thank you, @ScottMcCauley . Of course, some metadata store localised, which means translated into non-English languages - user information. However, this situation doesn't occur systematically and most localised charsets have fixed-length (Single Byte) except - to the best of my knowledge - in Asia where UTF8 is required for Multi-Bytes characters (Hanzi, Kanji etc.). Therefore, knowing that SAS 9 with fixed-length charset (non UTF8) is rather the norm than the exception, I think that adjusting to this case could be very beneficial. Setting up a UTF8 SAS 9 session is quite demanding and implies in most deployments to configure another Logical Server only for this very purpose : this would drastically limit the scope of the tables generated by the Inventory report, which looks incredibly useful :).  ... View more

Thanks for sharing. There is also the Multi Node Data Transfer mode which , although running in parallel, doesn't require SAS Embedded Process, only assuming the existence of a column to be partitioned in the source Data :  https://documentation.sas.com/?docsetId=casref&docsetTarget=p12gi5eub04169n1x62tz74kvwt2.htm&docsetVersion=3.5&locale=en Highly effective on Hadoop/hive. ... View more

Since you work on a BI server, your SAS depot will contain the standalone installer for Enterprise Guide. And you should try out SAS Studio, which, as a web app, is much more forgiving to short interruptions in network connection. Both can be used as a (in my eyes superior) replacement for Display Manager. ... View more

In theory, yes. The documentation for XCMD option says that "it can be restricted by the administor" meaning, this option is compatible with Restriction options at SAS Foundation level.   https://go.documentation.sas.com/?cdcId=pgmsascdc&cdcVersion=9.4_3.4&docsetId=hostunx&docsetTarget=n02699r064oqccn19vblte8xzr8m.htm&locale=en   $SASROOT/misc/rstropts/groups   the restriction applies selectively upon the SAS session owner account's login or - better - primary group.   the admin creates a specific SASV9.cfg file in the directory below with the option values set accordingly   <primary group>_rsasv.cfg     -XCMD   -this file will take precedence over any SASV9.cfg file globally applied -if the option value (not the case, here) can also be changed during the sas session, the restriction applies and the change is refused   Never tested. I am suprised this very option is compatible with restriction since it applies only for IOM server sessions.  ... View more

Thanks for this video, I'll read the aforementioned papers. Basechar() and Kpropdata() functions are especially useful with SAS SPRE sessions on Viya when dealing with extended (European here) Charsets. ... View more

@Peter_L  Thanks for the suggestion. The individual PDFs are indeed generated automatically whenever a writer publishes new content. The challenges described above centered around two things: the combined PDF which we maintained for SAS Viya 3.4. The PDFs that you can download from https://documentation.sas.com/download?softwareId=administration&softwareVersion=3.5  The combined PDF (#1) could not be generated automatically (or at least not without a disproportionate amount of tooling work) and the maintenance was just not cost-effective. So it was abandoned for 3.5   The PDFs that you can download from the above link (#2) are always perfectly up to date. But because you've downloaded them, we cannot keep your local versions fresh. We're relying on you to update your downloads regularly. The problem is not that severe. The admin guide comprises ~25 documents and I think we've only had ~5 updates in 2020. So if you downloaded on January 1st, ~80% of your PDFs are still up to date. But we republish to fix bugs and issues, so it is important for you to have the latest content.   Thanks again for reaching out Simon ... View more

Thanks @DanielKaiser for describing how the Metacoda Security Plug-ins with the Metacoda Metadata Testing Framework helps to ensure the integrity of your SAS security implementation.   @ANLYNG if you are wanting to monitor SAS metadata security over time the Metacoda Metadata Testing Framework may also help you. Please read @PaulHomes' blog post which references his SAS Global Forum paper on the topic https://platformadmin.com/blogs/paul/2014/03/sas-metadata-security-testing/ We also provide 30 day free evaluations where you can try it out in your own environment.   As @ronan mentioned you may also want to look at the Audit reports within Environment Manager.   Kind Regards, Michelle ... View more

Hi Cliff / @clmeye ,   thanks for your reply. I was hoping to see some more items than in the initial post of a year ago, perhaps some inclusions of what has been asked for input and discussed in this thread!   Will definitely keep attention to this thread. ... View more