When running a SAS^® Stored Process in SAS 9.2, a client user account is used to connect to a database library that is defined in a SAS® Metadata Repository if the library is assigned with a LIBNAME statement in the SAS Stored Process source code. However, if the library is preassigned or defined in an autoexec file, the SAS General Server login account sassrv is used.

In SAS® Management Console, the client user must have a login account that is a valid account for database access (or be a member of a metadata group that has such an account) unless another user identity is specified when accessing the library. The Authentication Domain of this account must match the Authentication Domain of the database.

As an example, if a SAS Stored Process contains the following statement:

  libname oralib meta library="my ora library";
  

Then, the following conditions must be true:

1. The client user must have metadata permission to access the ORALIB library.
2. In SAS Management Console under User Manager the client user must have a login user account that has database permission (granted by the database administrator) to connect to the database (or be a member of a metadata group that has such an account). The password for this account must be specified.

   The Authentication Domain of this account must match the Authentication Domain of the database. As an example, if the ORALIB library has an Authentication Domain called OraAuth, then the client user account must also have an Authentication Domain called OraAuth.

If you want to access a database library using a different user identity, you can specify the USER= and PASSWORD= options in the LIBNAME statement. The specified user must have a valid account for database access.

If you are using Integrated Windows Authentication (IWA) when connecting to a Microsoft SQL Server database, the client user account is not used. Instead, the sassrv account (SAS General Servers login account) is used. This is an exception to the information provided above.

If you are using Kerberos when connecting to a database, the client user account is not used. Instead, the sassrv account (SAS General Servers login account) is used. This is an exception to the information provided above

For more information about client access to metadata resources, see SAS Note 36919, "SAS^® 9.2 SAS^® Stored Processes use client credentials for SAS^® Metadata Server access."

Operating System and Release Information