topic Re: which is better? Root admin role or security rule for microservice account? in Management & Governance

which is better? Root admin role or security rule for microservice account?

Huiying — Mon, 04 Nov 2019 11:57:51 GMT

We have self-made microservice connecting to QlikSense to do some stuff. The microservice account needs to have right to everything.
We have tested below 2 ways, and both works fine. Question is, which way is better?
1. grant Root Admin role to the microservice account.

2. add security rule to allow microservice account to do everything.

We use QlikSense Enterprise 2019 June version.

Best regards,

Susan

Re: which is better? Root admin role or security rule for microservice account?

Levi_Turner — Mon, 04 Nov 2019 18:51:15 GMT

If the micro-service account truly needs access to all resources in the context of the QMC, therefore analogous to being a RootAdmin, then make the user a RootAdmin. At the margins, more rules = more compute needed to evaluate access. If the additional rule is entirely duplicative of something that already exists, then it doesn't make sense for the rule to exist both from an efficiency standpoint and from a manageability standpoint.

Re: which is better? Root admin role or security rule for microservice account?

Huiying — Wed, 06 Nov 2019 12:29:31 GMT

Thank you, Levi!