Create Service Accounts and an Access Group
-
In the operating system, create two service accounts
that can be authenticated by the workspace server’s host:
| rpooladm |
is the pool administrator account, which handles
requests for processes in the restricted workspace server’s
client-side pool.
|
| rpoolsrv |
is the puddle login account, which functions as
the launch credential for the restricted workspace server’s
client-side pool.
|
Tip
On Windows, give these accounts
the
Log on as a batch job Windows
privilege (for example, if you have a
SAS Server
Users host group, you can simply add these accounts
to that group). You can use domain accounts or local accounts.
-
In SAS Management Console,
on the
Plug-ins tab, use the
User
Manager to create the following identities:
-
User:
Restricted
Pool AdministratorOn the
Accounts tab,
add a new login that contains the
rpooladm user
ID and no password. Assign this login to the authentication domain
of your workspace server.
-
Group:
Restricted
Puddle Login Group
-
On the
Accounts tab,
add a new login that contains the
rpoolsrv user
ID and password. Assign this login to the authentication domain of
your workspace server.
-
On the
Members tab,
make the
Restricted Pool Administrator a
member of the group.
-
Group:
Restricted
Puddle Access GroupOn the
Members tab,
make the users and groups that will use the restricted pool members
of the group. This group does not need any logins.
Tip
On Windows, remember to qualify the user ID that you
store in each login (for example,
WIN\rpoolsrv).
Copyright © SAS Institute Inc. All rights reserved.