Security Settings & Rolls

[#1]

I need some assistance on setting this up.  I want to set up rolls for my users and each of the rolls would have different security settings.   I also need to turn off the default settings for access.  I have AD Group already set up (HR, Operations, Sales) with all f the users who will have access to Sense.  I want to assign the AD groups to the streams with the same name and then rolls to the users that will define their rights.

The rolls and settings I am trying to create are:

Admin = Root Admin (this is already set up)

Developer - Can create apps, stories, sheets, access to all data connections & create data connections, publish apps in QMC, no other QMC rights

Analyst - create sheets, publish sheets, create stories, no qmc access

User - read only in apps and can create stories, no qmc access

Thoughts?

[#2]

I am talking about setting this up in the QMC, not section access.  In review the help files this is possible, but I have not been able to dial it in so to speak so I am looking for some guidance there.

[Michael_Tarallo · Accepted solution]

Hi Sean, I assume you mean for Qlik Sense?

If so, to get started - you might want to watch this Webinar: (video)

http://www.qlik.com/us/explore/resources/on-demand-webinars/us-qlik-sense-security-rules-centralized...

I found this extremely helpful when learning about Qlik Sense security rules.

Let us know how you do.

jog‌ - great job, excellent webinar.

Please mark the appropriate replies as CORRECT / HELPFUL so our team and other members know that your question(s) has been answered to your satisfaction.

Regards,

Mike Tarallo

Qlik

[kevincase]

Sean,

This is all controlled by editing/creating security roles in the QMC.  For Example, if you want to grant a Group (from AD) access to create applications, you would probably want to disable the rule CreateApp.  You would then want to create a new rule, such as CreateAppCustom.  When Creating this rule, lets say you wanted to grant users belonging to the IS AD group the ability to create applications, you would add the following condition to the new CreateAppCustom rule:

When this rule is enabled, only users belonging to the AD group of IS will have the ability to create an application.

You will want to do similar changes around FolderDataConnections and Streams.  

This is just a sample to get you pointed in the right direction.  If users are not assigned any of the default roles, they will not have the ability to do much in QMC.  That's what the default roles are mainly used for (Root Admin, ContentAdmin, etc.).

It's really all up to you as to how you want your security to work.   

So, for your HR stream, the rule would be something like this:

Hope this helps point you in the right direction.

Kevin .....

[#5]

Hello, that link appears to be dead?  I can't get the page to load on IE, Chrome, or my iPhone I just get a white screen.

[Michael_Tarallo]

Hi Scott - looking into it.

[Michael_Tarallo]

Hi Scott - web team is working on the issue. It was mentioned that it may be a few hours.

[#8]

Thanks for the prompt reply Michael.

[rittermd]

If you have not already take a look at this.  Released by Qlik about a month ago.

Qlik Sense Governed Self Service

[sohailansari201]

Michael, the link is still not working. Can you suggest any other alternate link for this? Thank you,