Section Access Multiple AD Groups

[jandelaet]

Hi there,

I'm facing a problem with section access and AD Groups.

I Have a user who is known in 2 different AD Groups : For Example GROUP1 and GROUP2.

My section access table is as follows

NTNAME	ACCESS	OMIT
GROUP1	USER	Field 1
GROUP1	USER	Field 2
GROUP2	USER

For a user who is only known in GROUP1, Field1 and Field2 are omitted, as expected.

For a user who is only known in GROUP2, no fields are omitted, as expected.

But if a user is known in both AD Groups, then also Field1 and Field2 are omitted.

In this case I would expect Qlikview to use the most wide group and not omit any field.

Is there a way to achieve that ?

Thanks a lot !!

[Gysbert_Wassenaar]

In Qlikview the most restrictive rules will be applied. If one rule denies access then no other rule can grant it. The only way I see around this is to remove your example user from GROUP1. Or create a GROUP3 and, your user to that group only and add rules specific for that group to you section access table.

[jandelaet]

Thanks a lot for the information Gysbert !