Administering SAS Identities for Users

For each SAS Business Rules Manager user, you must create an individual SAS identity on the SAS Metadata Server. The SAS identity is a copy of the ID with which the user logs on to SAS applications. Based on this identity, the system can determine who can access which application and can audit individual actions in the metadata layer. The SAS identity consists of a name and the user ID for the user’s external account. This ID can be any type of account that is known to the metadata server’s host, such as an LDAP account, Active Directory account, host account, or other type of account.

When you are entering user IDs for Windows accounts, be sure to qualify the ID (for example, WIN\myID or myID@mycompany.com).

In a Windows environment, add new users to the Log on as a batch job local security policy on the machine that hosts the SAS Workspace Server.

The following users are created as part of the SAS Business Rules Manager installation process:

To create SAS identities for your users, manually enter the information for each user through the User Manager plug-in in SAS Management Console. If you have a large number of users, then you can extract user and group information from one or more enterprise identity sources. You can then use SAS bulk-load macros to create the identity metadata from the extracted information.

For more information about creating and managing identities, see SAS Management Console: Guide to Users and Permissions. For information about the SAS bulk-load macros, see User Import Macros in SAS Intelligence Platform: Security Administration Guide. These documents are available at http://support.sas.com/documentation/onlinedoc/intellplatform/index.html.