You also mentioned you want to restrict number of management console connections. This is impossible for now, as far as I know. But fortunately, management console connections do not consume a lot of resources, unless they are very specific admin/backup log-ins which require special handling from the metadata workspace server. In addition to the previous answers, if a user will be somewhat knowledgeable about the sas environment, there is a possibility for that user to use a separate sas.sh (own rewritten one) and a separate work area which may diminish your restrictions. In these cases you may need to run ps commands as root every minute, calculating the number of sas processes per user, and probably killing the newest ones, though I'd be very careful with this script
... View more
