section access

[#1]

Hi All,

I am not managing my users in any database. It is based on AD groups NTNAME.

My issue is everytime a new user added into NT AD group, i have to update my section access table for that user.

Which i dont want as its a manual work everytime.

So is it possible to do section access based on AD groups only without mentioning the userid in section access table.

ACCESS	USERID	GROUP	OMIT
USER	gal\Prasanta	QLIKAMG	Price
USER	gal\Sachin	QLIKAMG	Disc
USER	gal\Kumar	QLIKGEN

Regards,

Prasanta

[reddy-s]

Hi Khatua,

Check this out:

https://help.qlik.com/en-US/sense/1.1/Subsystems/Hub/Content/Scripting/Security/SectionsInTheScript....‌

Thanks,

Sangram Reddy

[#3]

Hi Sangram,

I Would really appreciate if you can just read my question,

Actually I am looking for.a solution around section access.

its not about how to configure a simple section access.

thanks in advance

Regards

Prasanta

[rittermd]

I don't know if this will help.  I am not using AD.

But I created an extract and associated task that creates or updates a QVD with the user information that I am using for my Section Access each night.  I am building this from a table in my application of system users.

So I do not have to manually do anything when a user is added or removed from the application.

I am assuming that something like this could also be done with AD.

[#5]

Hi Mark,

thanks, this sounds like helpful in my case as well.

Would you mind to share a sample of your setting,

thanks in advance

[rittermd]

So here is the code from the extract.  I have to massage the data to put it in the form that Qlik Sense is expecting.

UserAuthorization:

select  'USER' AS ACCESS,'WIN-IVTIROI5TAF\'+ulp.userid AS USERID, c.customerid AS CUSTOMERID

from

UserLocPermission ulp

I then store the output into a QVD

Then in the Section Access part of the dashboard script I have the following:

LOAD

     "ACCESS",

     "USERID",

     CUSTOMERID

FROM [lib://QVD Files (win-ivtiroi5taf_mritter)/USERAUTHORIZATION.QVD]

(qvd) Where 1=1;

When I load the actual data I have a field named CUSTOMERID that it is matching against the data in the QVD to limit access.

Hope that makes sense.  I had to play around with this quite a bit to get it to work.  You must have the Where 1=1 in the Load statement.  I found that in another post here in the Community.