topic Re: Simple Qlik Sense Section Access in Connectivity & Data Prep

Simple Qlik Sense Section Access

Thu, 16 Apr 2015 14:23:19 GMT

I am attempting to use section access with Qlik Sense. I am testing against "ADMIN1", that is aRootAdmin in Qlik Sense, but also admin in the Windows server. I tried the following script in data load editor, I hit load data, quit then re-enter. Qlik says: "Access Denied".

Section Access; 
LOAD * Inline [ 
ACCESS, USERID 
ADMIN, ADMIN1 
]; 

Section Application; 
LOAD * Inline[ 
Customer, Age 
1,1
];

I replaced ADMIN, ADMIN1 with ADMIN, DOMAIN1\ADMIN1 but still "Access is Denied". Same when I try ADMIN, * or ADMIN, '*'.

How can I make this simple test work?

Thanks,

Amir.

Re: Simple Qlik Sense Section Access

Anonymous — Thu, 16 Apr 2015 16:16:53 GMT

could it be because you are using AD account vs. QS account? I see a good example in a help file:

https://help.qlik.com/sense/en-US/online/index.html#../Subsystems/Hub/Content/Scripting/Security/DynamicDataReduction.ht…

Re: Simple Qlik Sense Section Access

Thu, 16 Apr 2015 16:42:01 GMT

Thanks Borin! I tried both AD and QS UDC accounts, both with RootAdmin/ContentAdmin roles. I tried assigning them USER and ADMIN. Both "Access Denied".
Yes thanks. I read the data reduction example, my example is much simpler (just section access, no data reduction yet), but still doesn't work. Thanks for help anyway. Appreciate it.

Re: Simple Qlik Sense Section Access

Tue, 05 May 2015 13:14:56 GMT

The example at the top of the thread does not work for 2 reasons.

1. There is no ADMIN value for the Access field in Qlik Sense. There is only USER.

2. You did not supply a reduction field in the Section Access table, therefore, the user logging in has no access to any data and results in an Access Denied message.

Seems like you have not added reduction field based on your last message. Make sure to add that and make sure that the reduction field is All Caps or Section Access will fail.

Re: Simple Qlik Sense Section Access

Anonymous — Fri, 04 Sep 2015 18:31:34 GMT

Hi Jeffrey,

When I try, I agree with you that there is no ADMIN value for the Access field in Qlik Sense but in the help it says otherwise:

http://help.qlik.com/sense/2.0/en-US/online/#../Subsystems/Hub/Content/Scripting/Security/sections-in-script.htm

Am I missing something here?

Re: Simple Qlik Sense Section Access

Mon, 14 Mar 2016 06:10:10 GMT

Your link is not available. Will you please upload it again.

Re: Simple Qlik Sense Section Access

Greg_Williams — Wed, 04 May 2016 11:30:30 GMT

In your lower table, you should include a field that links back to the section access table. Add a field like Age or Customer in the first table and provide values that should be used to reduce / limit access to specific data values. Hope this helps.

-GW

Re: Simple Qlik Sense Section Access

sohailansari201 — Thu, 26 Jan 2017 15:49:15 GMT

Please help me with this simple Section Access script.

SECTION ACCESS;

LOAD

INLINE [

ACCESS, USERID, EMPLOYER_NAME, OMIT

USER, LOCALUSERS\SENSE_SYSTEM,*,

USER, LOCALUSERS\QVDEV, ABC,

USER, LOCALUSERS\QVDEV, XYZ,

USER, LOCALUSERS\QVADMIN,*,

USER, LOCALUSERS\QLIKUSER, XYZ,

USER,INTERNAL\SA_SCHEDULER,*,

];

SECTION APPLICATION;

The users QLIKUSER and QVDEV are successfully seeing the reduced data based on ABC and XYZ only but the user SENSE_SYSTEM and QVADMIN are not seeing all the data. Instead they also see the data reduced to ABC and XYZ. I have tried both USER or ADMIN in the ACCESS field for them but it just doesn't work. Can some one notice anything out of the ordinary here?

Thank you.

Re: Simple Qlik Sense Section Access

Anonymous — Thu, 26 Jan 2017 18:28:07 GMT

How about if you leave the OMIT field blank (i.e. do not use *) ?

Re: Simple Qlik Sense Section Access

sohailansari201 — Thu, 26 Jan 2017 19:00:08 GMT

Thanks Bilge, the OMIT field is already blank. The * are for reduction field (EMPLOYER_NAME)

Re: Simple Qlik Sense Section Access

Anonymous — Thu, 26 Jan 2017 19:08:56 GMT

Sorry I meant leaving the REDUCTION field empty.

Re: Simple Qlik Sense Section Access

sohailansari201 — Thu, 26 Jan 2017 19:55:44 GMT

yes tried that too and that gives me the error "Access is Denied" on the hub.

I did some more research and I think I have found the answer now. The * does not mean access to all the data in your QVF. The * gives you access to all the REDUCTION field values listed in the SECTION ACCESS. Let me try to put a simple example here:

A basket of fruits has apples, bananas, strawberries & grapes.

SECTION ACCESS says:

UserA has access to apples

UserB has access to grapes

UserC has access to bananas

ADMIN has access to *

The section access application does not gives ADMIN access to all 4 fruits but instead it will give ADMIN access to all those fruits that are listed WITHIN the section access area for all other USERS. Therefore, ADMIN will have access to apples, gapes & bananas only.

Thank you,

Re: Simple Qlik Sense Section Access

sspe — Mon, 30 Jan 2017 12:11:51 GMT

I have been looking into this in Qlik Sense as well, but is a little unsure about what the difference is on the USER and ADMIN user types in Sense?

The documentation says - "A person with ADMIN privileges has access to all data in the app. A person with USER privileges can only access data as defined in the security table.", but how should that be interpreted? I assumed it was different from QlikView in the sense that ADMIN usertype would see ALL data regardless of Section Access, but doesn't seems to be the case (at least it's not what I see in my testing).

So, does anyone have a better explanation of the difference on the two user types?

Regards

Steen

Re: Simple Qlik Sense Section Access

stiffi88 — Mon, 30 Jan 2017 12:36:48 GMT

Are the fields you want to access all in Upper()?

Then it is always a good idea to load the table from an excel file so you can't log out yourself.

Clemens

Re: Simple Qlik Sense Section Access

sspe — Mon, 30 Jan 2017 12:48:33 GMT

I don't think loading from an Excel file will prevent you from loggin yourself out as such. The good thing with QlikSense though, is that you can always open the app without data and then fix your Section Access settings if you get locked out. This is a huge improvement from QlikView 🙂

/Steen

Re: Simple Qlik Sense Section Access

stiffi88 — Mon, 30 Jan 2017 12:57:58 GMT

Ahh okay thanks i didnt know that.

I did this always with an external table so I can allways change the section access.

Thanks for that.

Clemens