Who Can Do What in the Server Manager Plug-in

Use the following table to determine the group memberships, role memberships, and other criteria that enable users to perform tasks in the Server Manager plug-in in SAS Management Console:

Actions	Requirements1
Actions	Centralized Administration Approach	Delegated Administration Approach
Create or update server metadata (except the SASMeta workspace server and the SASMeta DATA step batch server) Validate servers (except the SASMeta workspace server and the SAS Framework Data Server) Connect to servers and spawners and view the following tabs2: Metadata server Connections and Options tabs Object spawner Options tab OLAP server and framework data server Connections, Sessions, and Options tabs	Membership in the SAS Administrators group Validation of a standard (non-pooled) workspace server also requires credentials to start a workspace server.	Membership in the Management Console: Advanced role Validation of a standard (nonpooled) workspace server also requires credentials to start a workspace server.
Connect to servers and spawners (except the metadata server, the SASMeta workspace server, and the framework data server) and view all tabs2 Adjust the logging level for a server, spawner, or server process (except the metadata server and the framework data server) Stop, pause, resume, or quiesce a server, spawner, or server process (except the metadata server, the SASMeta workspace server, and the framework data server) Refresh the object spawner	Membership in the SAS Administrators group	Membership in the Management Console: Advanced role, and Administer permission on server metadata
Connect to the metadata server and view the Clients, Loggers, and Logs tabs2 Adjust the metadata server's logging levels Stop, pause, or resume the metadata server	Membership in the SAS Administrators group	Membership in the Management Console: Advanced and Metadata Server: Operation roles
Validate the SASMeta workspace server Connect to the SASMeta workspace server and view tabs2 Stop, pause, resume, or quiesce a process on the SASMeta workspace server	Membership in the SAS Administrators group	Membership in the Management Console: Advanced role; and ReadMetadata and Administer permission on the SASMeta workspace server
Validate the SAS Framework Data Server Connect to the framework data server and view tabs2 Stop, pause, resume, or quiesce the framework data server	Specification as a system user in the framework data server’s configuration file (dfs_serv.xml, located in `SAS-configuration-directory/Lev1/FrameworkServer/dffedsvrcfg`). By default, this file specifies the SAS Administrator as a system user.
1These columns list minimum requirements. The Metadata Server: Unrestricted role can be substituted for any of the roles and groups that are specified here.
2To view tabs, you must right-click on the server or spawner and click Connect.

As a best practice, users who are members of the SAS Administrators group should be defined as internal users (rather than external users) in metadata.

For more information, and to understand what role memberships and permissions are derived from membership in this group, see About Adding Users to the SAS Administrators Group.