topic Re: How to segregate access for APPs. in App Development

How to segregate access for APPs.

khanashique — Mon, 09 Apr 2018 12:41:39 GMT

Hi Experts,

I have an APP published in one Stream, and the same stream has other different Apps. I need to know how can i segregate access for APPs for two different users.

Example:

Stream Apps

Sales Daily Sales

Monthly Sales

Revenue

In the above example, Revenue has to be shared with 2 different users.

Thanks,

MAK.

Re: How to segregate access for APPs.

jerifortune — Mon, 09 Apr 2018 12:52:45 GMT

Hi Khan,

You can set up a security rule on QMC that would restrict access to apps. You assign read access of the app to users whom you want to grant access to the app. You can read about Security Rule https://help.qlik.com/en-US/sense/February2018/Subsystems/ManagementConsole/Content/preinstalled-QMC-security-rules.htm

Hope this would assist you

Re: How to segregate access for APPs.

khanashique — Mon, 09 Apr 2018 13:42:02 GMT

Hi Jerry,

Thanks for your quick reply, i have gone through the link but i got lost...

Can you please share any simple example so that i can try the same...

Thanks,

MAK.

Re: How to segregate access for APPs.

jerifortune — Mon, 09 Apr 2018 14:24:40 GMT

I don't have access to Security Rule interface to give you the exact window, however, the following steps should guide you.

Step one: Custom Property

1. Go to custom property and create new custom property with Name of your choice eg AppUserGroup

2. Check the USER box

3. Under VALUES enter NonRevenue - You can add multiple revenues but for now one could be fine.

4. Create button

Step two: Security Rule

1. Go to Security rule and create a security rule to restrict users access to Revenue App

2. Under Name, you may give it Revenue App Restriction

3. Under Resources Filter : Select App

4. under Action, check Read or other actions as applicable

5. Under condition, make sure this conditions are applied

a. App is equal to 'Revenue' (the name of the app you want to restrict)

b. @AppUserGroup is not equal to 'NonRevenue'

6. Set Context to both QMC and Hub

Step Three: Assigning users to group

1. Select user that you don't want to have access to Revenue App

2. Under custom Property, select NonRevenue as AppUserGroup

Hope this could be of help.

Thanks

Re: How to segregate access for APPs.

khanashique — Tue, 10 Apr 2018 04:52:20 GMT

Hi Jerry,

The above steps which you have provided are very helpful, and i was able to follow all the steps but still its same, it seems like the security rules are not working...

below is the condition i have applied:

((resource.name="Revenue" and resource.owner.@Test_Apps!="Sales"))

Thanks,

MAK.

Re: How to segregate access for APPs.

jerifortune — Tue, 10 Apr 2018 12:48:17 GMT

user.@Test_Apps!="Sales"

I assumed you followed the steps above although the naming is not the same

Re: How to segregate access for APPs.

khanashique — Tue, 10 Apr 2018 13:53:26 GMT

Hi,

I have tried that too earlier, but result is same...

Thanks,

MAK.

Re: How to segregate access for APPs.

jerifortune — Tue, 10 Apr 2018 15:03:11 GMT

It is difficult for me to guide you without having access to the QMC. I can't say what is exactly broken. But perform this check.

1. Is Test_App a custom property for Apps or Users?

2. Did the App name popped up or you typed it? It should pop up
3. You may include app object under resources filter like this:
Resources Filter: App_*, App.Object_*

4. You can do this test under the condition:
Resource.Name!="<Name of your app>" AND User.name ="<Select your Name here>"

Check if you have access to the app

Re: How to segregate access for APPs.

khanashique — Wed, 11 Apr 2018 04:59:59 GMT

Hi Jerry,

1. Is Test_App a custom property for Apps or Users? - Its Custom Property Name

2. Did the App name popped up or you typed it? It should pop up - I think i have typed

---------------------------------------------------------------------------------------------------------------------------------

Hard luck, even tried below no result...

3. You may include app object under resources filter like this:
Resources Filter: App_*, App.Object_*

4. You can do this test under the condition:
Resource.Name!="<Name of your app>" AND User.name ="<Select your Name here>"

Thanks,

MAK.

Re: How to segregate access for APPs.

khanashique — Thu, 19 Apr 2018 10:36:29 GMT

I am still waiting for experts to assist me in achieving / solving this questions...