Qlikview document security at AD group level

[mayuranp]

I have simplified my question as below.

We have 2 Qlikview Apps. App 1 and App 2.

I have created two AD groups Group 1 and Group 2 in the same domain.

I want only Group 1 to access App 1 and Group 2 to access App 2.

Some users are present in both groups.

For simplicity, assume all users in Group 1 and Group 2 have named CALs.

What is the best way implement this? Can I achieve this without section access?

I have licenses for Qlikview Server Enterprise and publisher.

Thanks.

[marcus_sommer]

This could be reached without section access just by using NT as authentification mode which meant the authentication of the users will be done from windows active directory and the access rights to the applications are applied like any other access rights to files and folders. In short: create two folders within the mounted folders of your qlikview environment and set your permissions appropriately.

- Marcus

[atoz1158]

I would have reckoned that the quickest way would be to set the distribution of each App to the relevant AD group and let the publisher handle everything for you

Regards

Adrian

[mayuranp]

Thanks for your comment.

I had done that and it all worked fine. However, when I reload the qvw file via publisher task it resets the permission to Authenticated users. Now all the users in the domain can view the report.

[mayuranp]

Can you explain the steps in little more detail?

[atoz1158]

On the QMC task ensure that on the Distribute Tab User Type is set to Named Users

Regards

Adrian

[mayuranp · Accepted solution]

If publisher is not involved, the solution is to set the permissions at the user documents folder level. i.e. Give read access to Group 1 for App 1 folder.

--

Since I have publisher, you need to set the permissions when creating the tasks

Select Named Users to User Type and select the AD group using the icon next to it.

Now, after reload, it assigns the permissions correctly to the qvw app.

[mayuranp]

Thanks.