topic Re: Section access in Nprinting in Qlik NPrinting

Section access in Nprinting

Anilb1603 — Mon, 22 Jul 2019 20:08:20 GMT

Hi Guys,

Do we need any qlik sense token to work with section access in nprinting. I have a qs dashboard with section access for 50 users. Now I want to add 20 more users to the dashboard with the same section access and distribute Nprinting reports to those 20 users based on the filters defined in the section access without giving them access to actual qs dashboard. Do I still need to allocate qs tokens to this 20 users to achieve this?

I didn't find much documentation on this, Can someone tell me how to work with section access in Nprinting??

Thanks,

Anil

Re: Section access in Nprinting

Frank_S — Mon, 22 Jul 2019 22:28:01 GMT

Hi @Anilb1603

Qlik Sense tokens are not necessary for NPrinting report distribution whether section access is used or not.

You need to assign QS tokens if a user is required to access the Qlik Sense hub and in turn execute On Demand reports from within the Qlik Sense hub.

So if you are distributing reports by email, to specific user folders on the server or network, or to NP NewsStand, QS tokens are not required for NP report distribution. (Section access is only needed to limit data based on section access/data security requirements).

I suppose QS tokens are not mentioned since it is not a requirement to distribute NPrinting reports for the 'destinations' specified in the NPrinting Web Console.

Note that if you send reports to the newstand, you must also set up individual users via the NP web console. (no tokens are necessary to perform that operation either).

https://help.qlik.com/en-US/nprinting/June2019/Content/NPrinting/Recipients&Users/Create-users-filters-groups.htm

Hope this helps.

Kind regards...

Re: Section access in Nprinting

Anilb1603 — Tue, 23 Jul 2019 03:10:13 GMT

Thanks Frank, It was very helpful.

Just to make sure, so we do not need any qs tokens for the distribution of nprinting reports to any of the destinations available in NP web console like Email, network folders, newsstand and even qlik sense hub.

please let me know if my understand was correct..

Re: Section access in Nprinting

Anilb1603 — Thu, 25 Jul 2019 20:51:21 GMT

Hey Guys,

We tested out a sample dashboard with section access for 3 users all of them are in same domain as qlik sense and qlik nprinting and the users are also presented in both qlik sense and nprinting. we used the below script.

Section Access;
LOAD * inline [
ACCESS, USERID, BU, OMIT
ADMIN, AMERICAS\User1, *,
USER, AMERICAS\User2, A,
USER, AMERICAS\User3, B,
];
section application;

User1 has a developer access to the app, user 2 has a root admin rights in qlik sense and user3 doesn't have any access to app or token from qlik sense.

I created the connection with User1 Identity with checking apply section access for the selected identity option and created a sample power point report. When I distribute the report via email, only User1 and User2 gets the correct report but user3 didn't get any valid report (just getting some error message). In the task execution also it showing Nprintng failed generate a report for user3.

We tried creating a connection with user2 also but still user3 didn't get any report and also we tried creating connection with user3 but this time connection itself didn't work..

If I un-check the apply user section access for reports and create a connection then all the users including user3 getting the same report as the identity (Only user1 & user2) used to make a connection.

Finally I didn't understand do we need a token from qlik sense to work with section access or not.

can some one please help me on this one??

Thanks,

Anil

Re: Section access in Nprinting

Frank_S — Fri, 26 Jul 2019 19:12:59 GMT

The answer re: tokens is the same as my earlier post:

"Qlik Sense tokens are not necessary for NPrinting report distribution whether section access is used or not."

Re: Section access in Nprinting

Anilb1603 — Fri, 26 Jul 2019 19:35:41 GMT

Hey @Frank_S ,

Am I missing anything in above scenario? Why user3 is not getting NP report when using section access..

Thanks,

Anil

Re: Section access in Nprinting

Anilb1603 — Mon, 29 Jul 2019 13:46:51 GMT

Can someone please tell me what am I missing in my above scenario?? Why user3 is not getting any report if we don't need any qlik sense token to work with section access in nprinting??

Thanks,

Anil

Re: Section access in Nprinting

Frank_S — Mon, 29 Jul 2019 14:03:17 GMT

Have you checked your NP engine and scheduler logs?

Those should shed light or give some clues.

It's possible that the specific user in question may not be part of a security role to recevve reports like users or newstand users.

The user is not a recipient of a publish task.

If the logs don't give you much to go on and if the above do not help, the I suggest submitting a support case to investigate further...however it seems to be a permissions/role/ or publish task issue.

Re: Section access in Nprinting

Anilb1603 — Tue, 30 Jul 2019 16:16:23 GMT

Thanks Frank, Here the user 3 is getting the reports when we disable the section access. So I don't think its a security role or publish task problem in nprinting.

The logs just saying like:

Failed generation of report xxxxxxxxxxxxxxxxxx for user xxxxxxxxxxxxxxxx. ERROR: NPrinting Engine failed to open document.

Re: Section access in Nprinting

Frank_S — Tue, 30 Jul 2019 19:29:08 GMT

@Anilb1603

Which user is being used as the NP connection 'identity'?

User 3 or some other user? If some other user, do below:

Try to take User 3 out of the section access load script, reload the data in the load editor. Then reload the NP connection.
Then in NPrinting create filters necessary to filter the user data (user filter) for the report distributed for that specific user 3 user.

Re: Section access in Nprinting

Anilb1603 — Tue, 30 Jul 2019 20:41:56 GMT

@Frank_S,

User 1 being used in the Identity section. It was working through user filter but in real time scenario we gonna have 200 or more users we can not create that many user filters to match section access. It gonna be lot of manual work.

Re: Section access in Nprinting

Frank_S — Tue, 30 Jul 2019 21:03:55 GMT

@Anilb1603

I've put a question out to our R&D team about all this.
I'll post response hear when I hear from them. In the meantime, try assigning a sense token to user 3.
If that works, then we may have to have our documentation updated to make this process clearer.

Re: Section access in Nprinting

Frank_S — Fri, 02 Aug 2019 15:00:18 GMT

Hi @Anilb1603

Please contact the Qlik Support desk or your Qlik Support partner and submit your findings so that this may be investigated further.

In the meantime, please use the previous suggestions regarding either the use of filters (which is faster than use of section access in terms of report generation performance) or assign the token to the section access NP report recipients.

Kind regards...

Re: Section access in Nprinting

Anilb1603 — Fri, 02 Aug 2019 15:26:08 GMT

@Frank_S ,

It worked without qlik token but the thing is the user should have some kind of security role or access to the stream or app even though token was not allocated.

For user3 in my above case, was presented in qlik sense but he doesn't have any role assigned and we included him in the section access. In this case it didn't worked. user3 didn't get any NP report.

Now we just added that user a security role giving him access to one of streams we are working on with nprinting but we didn't assign any token. It worked in this case. User3 gets the NP report as in section access.

But this is not how we wanted. If user is there in qlik sense with some kind of security role which means we assume he need a token and I think in this case the token will be allocated automatically when he tries to login to the hub.

Re: Section access in Nprinting

Frank_S — Fri, 02 Aug 2019 19:29:45 GMT

I checked with my colleagues and the suggested that to accomplish this requirement, you need to set up a login access rule.

https://help.qlik.com/en-US/sense/June2019/Subsystems/ManagementConsole/Content/Sense_QMC/login-access-rules.htm

For contextual information on setting up rules you can also visit the following youtube below...but the image above is the correct method according to my colleagues.

If you need more assistance with QS rules or have additional qlik sense requirements/questions, I would suggest starting a post here. https://community.qlik.com/t5/Qlik-Sense/ct-p/qlik-sense

https://www.youtube.com/watch?v=Z0UVPW2ql24