Administering SAS Identities for Users

Overview of SAS Identities

For each SAS Model Manager user, you must create an individual SAS identity on the SAS Metadata Server. The SAS identity is a copy of the ID with which the user logs on to SAS applications. Based on this identity, the system can determine who can access which application and can audit individual actions in the metadata layer. The SAS identity consists of a name and the user ID for the user’s external account. This ID can be any type of account that is known to the metadata server’s host, such as an LDAP account, Active Directory account, host account, or other type of account.

When you are entering user IDs for Windows accounts, be sure to qualify the ID (for example, WIN\myID or myID@mycompany.com).

In a Windows environment, add new users to the Log on as a batch job local security policy on the machine that hosts the SAS Workspace Server.

Note: Enter a user ID for Microsoft Windows in the format domain\userID. In order for a user to be able to schedule jobs using SAS Model Manager, you must specify a valid password in their user account. A user must also sign in with the same user ID (domain\userID) and password that you specified in their user account.

Note: Users who log on to SAS Model Manager using an internal account (a user ID that ends in @saspw) cannot access all of the features of the application. All users should be assigned external accounts.

The following users are created as part of the SAS Model Manager installation process:

Types of Users
User	Description
SAS Administrator	This user has access to all SAS Management Console capabilities and metadata administrative tasks.
SAS Demo User	This user is optional. You can choose to create this user during installation. However, this user is not assigned to a group during installation.

Creating SAS Identities

To create SAS identities for your users, manually enter the information for each user through the User Manager plug-in in SAS Management Console. If you have a large number of users, then you can extract user and group information from one or more enterprise identity sources. You can then use SAS bulk-load macros to create the identity metadata from the extracted information.

For more information about creating and managing identities, see SAS Management Console: Guide to Users and Permissions. For information about the SAS bulk-load macros, see User Import Macros in SAS Intelligence Platform: Security Administration Guide. These documents are available at http://support.sas.com/documentation/onlinedoc/intellplatform/index.html.