Tammy, it makes sense to have one metadata server serving the VA work the BI classic one and the data-mining.That brings you at the same level of an AD security administration with Windows and RBAC. The VA work (end users) are accessed by lasr-servers. You can define many of those. The simple bi work for less advanced users you can organize by SAS APP users on some compute servers. Putting that data and users there. You can define many SAS APP servers as they are meant as applications data and code by SAS. Those data miners can have their own SAS APP servers on dedicated compute servers. By that segregation you are needing groups to assign the users to all of these data segregated appservers. This approach is quite common. There is a problem with special roles like a person doing bi work and administration. In that case a dual account is normally mandatory. That solves also the part of data administration with VA. Windows admins are using that approach theirself but seeing SAS as something like excel do not make the association to do it similar with SAS. I am wondering how you would go on to protect system resource usage and data security by trying to prohibit excel.
... View more