topic Re: NPrinting Section Access -Qliksense in Qlik NPrinting

NPrinting Section Access -Qliksense

puratchid3 — Sat, 16 Nov 2024 02:56:02 GMT

I am using NPrinting April 2019 version.

While using section access with Qliksense i face error retrieving data.

Only the user with Root Admin roles in QlikSense is retrieving the data for others it return error.

The users already have professional and Analyser license in QlikSense same user is available in NPrinting also.

But the user only with Root Admin is getting the report.

Re: NPrinting Section Access -Qliksense

Ruggero_Piccoli — Tue, 23 Jul 2019 10:00:22 GMT

Hi,

The user in the Qlik Sense connection must be RootAdmin in Qlik Sense server. It is a documented requirements. It is not clear from your question if you are speaking about this user or the recipients of the reports.

If you do a Run Verification in the connection be sure that all flags are green

Add some screenshot or log files of the errors you had. We cannot help you if we don't know what the error messages are showing.

Best Regards,

Ruggero

Re: NPrinting Section Access -Qliksense

Lech_Miszkiewicz — Tue, 23 Jul 2019 10:02:17 GMT

Make sure you configure your nprinting properly for section access use:

users need to have domain name properly created and validated - do they?
make sure you follow all the steps from official documentation: https://help.qlik.com/en-US/nprinting/June2019/Content/NPrinting/DeployingQVNprinting/Section-access.htm
make sure you follow up linked help documents on help page

For other users it will be usefull to see log files in debug mode (check help.qlik.com for how to create logs in debug mode )

regards

Re: NPrinting Section Access -Qliksense

puratchid3 — Tue, 23 Jul 2019 10:07:15 GMT

Hi,

Below are the steps i followed.

1. Created a Connection to QlikSense app with our RootAdmin (Qliksense) user. Verification was successful all flags are green.

When NPrinting Job run using this account successfully sends the mail to the RootAdmin user without any issue.

2. But if I check the Apply Section Access , then all users other than RootAdmin user they get 'ERROR: NPrinting Engine failed to open document'. Thought other users have professional license in QlikSense.

Re: NPrinting Section Access -Qliksense

puratchid3 — Tue, 23 Jul 2019 10:10:06 GMT

Yes users have valid domain name as user connector is only active directory in both QlikSense and NPrinting.

Users also able to login NPrinting and Qliksense console using windows authentication.

Re: NPrinting Section Access -Qliksense

Ruggero_Piccoli — Tue, 23 Jul 2019 10:11:54 GMT

Hi,

From https://help.qlik.com/en-US/nprinting/June2019/Content/NPrinting/DeployingQVNprinting/NPrinting-with-Sense.htm

In the QMC you must give the RootAdmin authorization to the Windows user that runs the Qlik NPrinting EngineWindows service. That Windows user must also be a domain user.

Be sure that the user that runs the Engine Windows service is RootAdmin in Qlik Sense server.

Best Regards,

Ruggero

Re: NPrinting Section Access -Qliksense

puratchid3 — Tue, 23 Jul 2019 10:17:32 GMT

Yes the RootAdmin in QMC is the one used for creating connection in NPrinting and the Engine Service.

Without Section Access applied to connection it succesfully send email to all the non root admin users. But when Section Access applied only the users marked as RootAdmin in QS receives succefully email. for other non root admin they receive engine failed.

Does this means the NPrinting engine runs for each user in section access with QlikSense server?

Can you clarify how this Connection with users in section access communicates ? so it will be easier to identify the actual issue.

Re: NPrinting Section Access -Qliksense

puratchid3 — Tue, 23 Jul 2019 10:30:46 GMT

Attached the connection file of the Root User in NPrinting

Re: NPrinting Section Access -Qliksense

Lech_Miszkiewicz — Tue, 23 Jul 2019 10:38:11 GMT

It is actually more important to see all other bits of the screen how the connection is configured and what is populated etc...

Also, (and this is not in requirements but it has been my own practice) I tend to make user used to create connection ADMIMN in section access table and make sure this user can have access to all data.

Another note - are there any user filters? Maybe they contradicting section access and create empty set!

Do you have logs from publish task so we can see what happens when report should be generated for user who is not root admin?

Re: NPrinting Section Access -Qliksense

puratchid3 — Tue, 23 Jul 2019 10:44:33 GMT

Attached the log of users it failed today.

Yellow highlighted are the Non Root Admin users in QS but having admin role in NPrinting.

Other 2 Users are Root Admin in QS for them the report was sent without any issue.

Re: NPrinting Section Access -Qliksense

Lech_Miszkiewicz — Tue, 23 Jul 2019 10:48:59 GMT

Based on this screenshot i assume that user id used in section access is not matching recipient "Domain Name" property configured in users section of admin console.

Are you sure you are using the same configuration of DOMAIN\USERID ? in section access and nprinting?

Is the section access working properly for those users directly in Qlik Sense?

Re: NPrinting Section Access -Qliksense

puratchid3 — Tue, 23 Jul 2019 10:52:16 GMT

In Qliksense the users data is filtered using this section access.

We use DOMAIN\USERID in QlikSense USERID column. And in NPrinting the same users from the active directory is used similar to other 2 RootAdmin users.

There is no change about it.

Re: NPrinting Section Access -Qliksense

Lech_Miszkiewicz — Tue, 23 Jul 2019 10:57:33 GMT

I still think those are not matching... but cannot test it without having an actual access to your environment.

I say - open support ticket or maybe @Ruggero_Piccoli wants to add something..?

Re: NPrinting Section Access -Qliksense

Ruggero_Piccoli — Tue, 23 Jul 2019 12:31:05 GMT

Hi,

Check that the domain users set inside Qlik NPrinting users are correct and are present in the section access table.

Share here the Qlik NPrinting Engine log file so we can check more detailed error message. If you cannot share here the log (it doesn't contain any QlikView or Qlik Sense apps data) open a support ticket, include a link to this conversation and all Qlik NPrinting log files.

Best Regards,

Ruggero

Re: NPrinting Section Access -Qliksense

pablolabbe — Mon, 09 Dec 2019 22:35:55 GMT

@Ruggero_Piccoli Does the recipient need to have a licence allocated in the Qlik Sense Server? Or NPrinting Engine is just impersonating the user through the account service ?

Thanks,

Pablo

Re: NPrinting Section Access -Qliksense

Lech_Miszkiewicz — Mon, 09 Dec 2019 22:48:21 GMT

Hi @pablolabbe , for the service account it depends,

Upgrading to NPrinting June 2019 or later versions removes the necessity for a dedicated user account and an assigned "Token" or "Analyzer" license all together.

Regardles - recipient does not to have Qlik Sense token.

thanks

Lech

Re: NPrinting Section Access -Qliksense

pablolabbe — Tue, 10 Dec 2019 12:29:15 GMT

Thanks @Lech_Miszkiewicz . My question was related to recipients.

I have two more questions :

Do recipients need to bee added as users in my server as user accounts ?

Do they need to have access to the stream of the source application ?

Thanks,

Pablo

Re: NPrinting Section Access -Qliksense

Lech_Miszkiewicz — Tue, 10 Dec 2019 23:17:50 GMT

Hi @pablolabbe

I assume this question is still related to NPrinting Section Access - Qliksense topic...so

Do recipients need to bee added as users in my server as user accounts ?

answer: users need to be loaded with their domain account into section access table in Qlik Sense app used in NPrinting connection and they also need to be created as user/recipient with Domain account populated properly in NPrinting.

Do they need to have access to the stream of the source application ?

answer: I dont think they do. In my testing they did not.

Re: NPrinting Section Access -Qliksense

pablolabbe — Wed, 11 Dec 2019 14:07:20 GMT

Hi @Lech_Miszkiewicz ,

Thank you for your answers. Customer is using NPrinting version February/19 so the following list could be a behavior I observed could be related to the version:

1 - When running the task, the Domain Accounts are created as users in the server. (I'm running the task reading the app seated in a test server and we only have a few users added).

2 - Users need to have access to stream of the application. Without this, the task fail with the error "Failed generation of report 60f57a5f-611c-4d45-82e4-dff9436b75db for user 768ea896-dcac-4b59-883c-72ab6a0ec8d7. ERROR: NPrinting Engine failed to open document"

3 - When we put all this in production , a report User with access to the Hub will have access to the original stream of the app and also the reporting stream so this can confuse him. (We have two apps , one for analysis and a the other is a copy only for be used as a base app for reporting. The copy have some layout changes to couple the requirements to use pixel perfect reporting).

Considering issues 2 and 3 customer decided to use user filters instead of section access.

Regards,

Pablo

Re: NPrinting Section Access -Qliksense

gdelaossat1 — Tue, 17 Mar 2020 19:21:02 GMT

Hi @pablolabbe check this example: https://support.qlik.com/articles/000052818