topic Re: Active Directory several groups (User directory connectors) in Management & Governance

Active Directory several groups (User directory connectors)

martinr_ — Thu, 04 May 2017 09:24:27 GMT

I have created in the active directory several groups, with which I want to control rights.
The user should now be import via the user directory connector.
How can I import the groups QLIK-ADMINS and QLIK-USER together.

Have already & and | Tried, but without success.

Re: Active Directory several groups (User directory connectors)

martinr_ — Mon, 22 May 2017 15:56:02 GMT

hello. can anyone help me, i need it for several groups?

Re: Active Directory several groups (User directory connectors)

Vincenzo_Esposito — Tue, 23 May 2017 07:00:19 GMT

Hi Martin,

UDC supports only users as object type, groups are a user attrib. So if you import users belonging to the s QLIK-ADMINS and/or QLIK-USER group, you will see in their attribs

Re: Active Directory several groups (User directory connectors)

barry_stevens — Wed, 24 May 2017 04:09:38 GMT

Does something like this work (&(objectCategory=person)(objectClass=user)(&memberOf=CN=QLIK-ADMINS,ou=***,ou=***,ou=***,DC=***,DC=***)(&memberOf=CN=QLIK-USER,ou=***,ou=***,ou=***,DC=***,DC=***))) - replace the *** with your AD structure

However, another way is to have a single Group (QLIK-ALL) that contains those two groups and use the rules within qlik to control access. When you bring a user in it brings in all the groups it is a member of so you can then use the Admin and user group in qlik rules. In this case you could use the following

(&(objectCategory=person)(objectClass=user)(&memberOf=CN=QLIK-ALL,ou=***,ou=***,ou=***,DC=***,DC=***)))

Re: Active Directory several groups (User directory connectors)

martinr_ — Wed, 24 May 2017 08:02:52 GMT

Thank you Barry.

The upper example did not work.

I have tracked your solution approach and to import the user a group QLIK-ALL created.