Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
Not applicable

Active Directory/Section Access Alternative

Hi,

I'm trying to find an alternative for the Active Directory/Section Access security in QlikView.

In the QV Management Console, we have to manually add a user to the distribution list. We're trying to find a way, that we put all the users in an Excel file and than use that list in the manual distribution.

I know I can use Active Directory groups, but since I'm working for a big client, it takes a couple of week for the helpdesk to create a new group, or to add someone to a group (for access). So, we're trying to put an excel file somewhere on a sharepoint server, and use that Excel file as an 'Active Directory group' (to speed things up).

Is something like this possible?

8 Replies
bbi_mba_76
Partner - Specialist
Partner - Specialist

Hi,

you could use section access with only access and ntname read from the excel.

In this doc inline tables are used, you could replace with excel source.

Introduction to Section Access

Anonymous
Not applicable
Author

Hi,

You could use Configurable ODBC (Directory Services) and create a connection to a database (SQL, Access or whatever) or I guess even an excel file.

You could also create and use the local directory on the server.

I understand your problem but It would still be best if you could work out a process and use the AD.

Skärmklipp.PNG.png

Not applicable
Author

Hi,

we don't use Section Access in any of our applications (it was a decision made by my client). Since we have a lot of applications running, it would take too much time to adjust all applications.

We're using the Active Directory groups at the moment, but this means, that if we get a new request for access, we have to contact the help desk to add this new user to the group (and because of administrative formalities, this usually takes a week or 2). So that's why we were searching for a way to replace this Active Directory group by an Excel file (so owners of the application can add/delete users themselves), but without using the Section Access way, because this would mean that we have to adjust all existing applications (and we don't have the time for that).

Bill_Britt
Former Employee
Former Employee

Hi Nils,

Yes, you could use the Configurable ODBC, but with that and anything that isn't Windows base, you will have to write your own SSO page and pass the header information to QlikView.

Bill

Bill - Principal Technical Support Engineer at Qlik
To help users find verified answers, please don't forget to use the "Accept as Solution" button on any posts that helped you resolve your problem or question.
Anonymous
Not applicable
Author

Hi Bill,

But in this case I am guessing that it is windows based and if so this should not cause any problem and should work or am I missing something?

Not applicable
Author

it's windows based, but the perfect solution would be, that we can choose between either AD groups or Excel sheets (that contains the names of the users) for distribution

Bill_Britt
Former Employee
Former Employee

Hi,

You are confusing Authenication with Authorization. Windows does the Authenication and once you are authenicated this is passed to QV to see what you have rights to. So, you might be able to get by with this if you are running in DMS mode.

Check out the below link if you have not seen it.

Authentication and Authorization

Bill

Bill - Principal Technical Support Engineer at Qlik
To help users find verified answers, please don't forget to use the "Accept as Solution" button on any posts that helped you resolve your problem or question.
Anonymous
Not applicable
Author

Hi Bill,

Yes I know the difference, the Authentication will have to be solved with some form of sign on but I can't really see how to solve the problem any other way?