name and description, path specification, host type, and associated SAS Application
The SAS Metadata Server uses the SAS Open Metadata Architecture, which provide
common metadata services to SAS and other applications. Third parties can access
metadata in the SAS Metadata Server by using an application programming interface
(API) that is supplied by SAS. SAS Metadata Bridges are available to support metadata
exchange with a variety of sources, including the Common Warehouse Metadata Model
How the Metadata Server Controls System Access
The SAS Metadata Server plays an important role in the security of the SAS Intelligence
Platform. It controls system access in the following ways:
For accountability, we recommend that you create an individual SAS identity for
each person who uses the SAS environment. These identities enable you to make
access distinctions and audit individual actions in the metadata layer. The identities
also provide personal folders for each user. The metadata server maintains its own
copy of each user ID for the purpose of establishing a SAS identity.
You can define metadata-based access controls that supplement protections provided
by the host environment and other systems. The metadata-based controls enable you
to manage access to OLAP data, to relational data (depending on the method by
which the data is accessed), and to almost any metadata object (for example, reports,
data definitions, information maps, jobs, stored processes, and server definitions).
You can assign users and groups to roles that determine whether they can use
application features such as menu items, plug-ins, and buttons. Roles are designed to
make application functionality available to the appropriate types of users. For
example, role memberships determine whether a user can see the Server Manager
plug-in (in SAS Management Console), compare data (in SAS Enterprise Guide), or
directly open an information map (in SAS Web Report Studio). Applications that
support roles include the SAS Add-In for Microsoft Office, SAS Enterprise Guide,
SAS Forecast Studio, SAS Management Console, and SAS Web Report Studio.
For more information about security in the SAS Intelligence Platform, see Chapter 7,
“Security Overview,” on page 53.
How Metadata Is Created and Administered
Metadata can be loaded to the SAS Metadata Server in several ways:
• The configuration process for the SAS Intelligence Platform automatically creates
and stores metadata objects for the resources, such as servers, that are part of your
• SAS Metadata Bridges enable you to import metadata from a variety of sources,
including market-leading design tool and repository vendors and the Common
Warehouse Metamodel (CWM).
• When users create content such as reports, information maps, and data warehouses
with the SAS Intelligence Platform applications, these applications create and store
metadata objects describing the content.
28 Chapter 4 • Servers in the SAS Intelligence Platform