topic NPrinting - Creating Connection - Full Access? in Qlik NPrinting

NPrinting - Creating Connection - Full Access?

JanFloren — Mon, 02 Sep 2019 12:23:05 GMT

Hi,

When creating a NPrinting connection to a QlikSense App, you provide the proxy id, app id and also the identity. We're currently using the NPrinting service account (who has rootadmin rights on the QlikSense server), but this means that every NPrinting developer can access the data of all QlikSense apps? (In Sense Hub, it's restricted by the security rules).

Is there a way to put security on this? Is it a best practice to always use the service account as identity? All ideas are welcome.

Thanks.
Jan

Re: NPrinting - Creating Connection - Full Access?

Lech_Miszkiewicz — Mon, 02 Sep 2019 22:03:35 GMT

Well,

here are requirements regarding user used for creating connection:

https://help.qlik.com/en-US/nprinting/June2019/Content/NPrinting/GettingStarted/HowCreateConnections/Connect-to-QlikSense-apps.htm

now regarding developers in NPrinting... Instead of using default security roles for develeopers you can create app specific roles and assign them to people who meant to be developers so they can only work on data they are allowed to see. Again - all well described in official documentation here:

https://help.qlik.com/en-US/nprinting/June2019/Content/NPrinting/DeployingQVNprinting/Managing-roles.htm

regards

Lech

Re: NPrinting - Creating Connection - Full Access?

JanFloren — Tue, 03 Sep 2019 12:23:39 GMT

Thanks for your input. The only downside of the roles aspect is that when people got removed from AD groups, this also needs to be updated... the security is no longer centralized.

Kind regards,

Jan

Re: NPrinting - Creating Connection - Full Access?

Lech_Miszkiewicz — Thu, 05 Sep 2019 03:38:09 GMT

That is not true - roles can be managed via AD memberOf attribute

details are obviously in official documentation:

https://help.qlik.com/en-US/nprinting/June2019/Content/NPrinting/DeployingQVNprinting/Import-Users-Filters.htm#Import

hope this helps 🙂