Automation in updating section access sheet

[onkarkulkarni]

Hello All,

I have a dashboard where I am displaying count of user per Country, Product type and category. I have applied section access to restrict access for Country, Product type and category.

Now user request access for particular country and product through mail, then I update the section access file (.xlsx) on the server.

On daily basis it is becoming too hectic to monitor and update the excel sheet , high chances of missing user details in mail chains.

Could you please suggest an approach to avoid manual intervention. It would be great if backend section access file gets updated automatically based on the user inputs through a well defined process.

Hope I am clear with my requirements and thanks in advances.

Regards,

Onkar kulkarni

[onkarkulkarni]

Hello Experts,

Any suggestions on my query

Thanks..

[avkeep01]

Place the excel file in a share so other people are able to access and update the excel file. With the help of the ntfs rights on the folder you can maintain the users that are able to edit the excel file.

other solutions are more difficult like queries on the active directory, or creating a webportal or building a access database.

[onkarkulkarni]

Thanks ..

Placing excel file on shared drive will allow any user to access and update it, which is very risky considering we have 200 + users.

[jonathandienst]

Not really - just set write access to the folder so that only authorized users can update the file.

[ToniKautto]

Commonly this is controlled by existing IT processes. I think that is a better way to govern theses kind of scenarios and remove the administration from Qlik server.

For example you can utilize Active Directory groups instead of specific user names in your section access. Users then apply access to groups and get accepted through what ever an approval process you have for group management. 

[onkarkulkarni]

Thanks Jonathan,

Yes .. currently this is in place.. 5 authorised users receive requests form all 200 global users through emails and they update the excel manually. But now business dont want dependency on those 5 users. They are expecting that users shall be able to provide their inputs direct to application.

[onkarkulkarni]

Thanks Toni,

I agree creating AD group can be one of the options. However the combinations of AD group are very high.

Country -100    Product Type - 20  and category -10   So around 20K combinations of AD groups needed.

This is very time consuming process atleast in my organisation

Any other option apart from AD group.

[ToniKautto]

Honestly, I do not understand the reason for section access if anyone is expected to be allowed to override it. Why not just remove the section access?

[onkarkulkarni]

Basically section access is in place to restrict the access of usrs to view specific information.

section access file is not accessble to all users. we get information from business with user details and information they should see on dashboard.

e.g User from Europe should not see Asia pacific / Middle east region's data.

       User from electronics product line should not see data for cosmetics or sports wear or watches.

That is the main reason we need to restrict the user access on different levels.