QlikSense Section Access not reflect by AD

[nicholas5141]

Hi All,

I tried few guide and tutorial implement section access in Sense Hub but it still does not work, please assists. 

Script as below by right User1 should be able access the branch ID  = 66 data however, User1 still able to access all the data.

SECTION ACCESS;

SECTION_ACCESS:

LOAD * INLINE [

ACCESS,USERID, BranchID

USER,ADGROUP\User1,66

USER,ADGROUP\User2,11

];

SECTION Application;

FACT:

LOAD * INLINE [

    ID,Amount,Name,BranchID

    1, 10, AA, 11

    2, 20, BB, 22

    3, 30, CC, 33

    4, 11, DD, 44

    5, 13, EE, 55

    6, 15, FF, 66

    7, 5,   FF, 66

];

Please assists thanks a lot!

[lironbaram]

Hi

in the section access table all fields must be in upper case

also it's recomended that all users id's will be in upper case

[Lech_Miszkiewicz]

Hi,

What is ADGROUP in your userid string?

It should be DOMAIN\USERID

something like:

SECTION ACCESS;

SECTION_ACCESS:

LOAD * INLINE [

ACCESS,USERID, BranchID

USER,DOMAIN\USER1,66

USER,DOMAIN\USER2,11

];

SECTION Application;

FACT:

LOAD * INLINE [

    ID,Amount,Name,BranchID

    1, 10, AA, 11

    2, 20, BB, 22

    3, 30, CC, 33

    4, 11, DD, 44

    5, 13, EE, 55

    6, 15, FF, 66

    7, 5,  FF, 66

];

[nicholas5141]

Hi, I changed the syntax but it still doesn't reflect as per screenshot.

[Lech_Miszkiewicz]

who are you logged in as ? USER1? USER2?

remember that data reduction happens on document open - so you need to close and open Sense application

[Lech_Miszkiewicz]

if you are not sure, put a text object in qliksense app and then type in =osuser() and see results.

that will help us troublshoot it

[nicholas5141]

I login using user1.

By using OSuser() I getting

UserDirectory = PET; UserId = user1

So my userID load inline PET\USER1 should be correct but still not reflected.

I tried login using user3, user3 unable access the application at all. Hence data/row level not working.

[Lech_Miszkiewicz · Accepted solution]

well that proves that section access is working.

now down to data reduction:

Would you be able to use capital letters in your section access statements:

something like:

SECTION ACCESS;

SECTION_ACCESS:

LOAD * INLINE [

ACCESS,USERID, BRANCHID

USER,DOMAIN\USER1,66

USER,DOMAIN\USER2,11

];

SECTION Application;

FACT:

LOAD * INLINE [

    ID,Amount,Name,BRANCHID

    1, 10, AA, 11

    2, 20, BB, 22

    3, 30, CC, 33

    4, 11, DD, 44

    5, 13, EE, 55

    6, 15, FF, 66

    7, 5,  FF, 66

];

[nicholas5141]

Thanks it work now!