topic Re: Automatic License Deallocation based on inactivity? in Management & Governance

Automatic License Deallocation based on inactivity?

william_fu — Fri, 24 Aug 2018 12:44:39 GMT

Looking for a way to automatically deallocate users' licenses after a certain number of days (based on "last used" column in QMC).

Does anyone know if this is possible?

Re: Automatic License Deallocation based on inactivity?

PabloTrevisan — Fri, 24 Aug 2018 12:57:34 GMT

Hi William,

I think only if you create a rule where: user.isAnonymous () The token is allocated for 28 days.

But it would not be for inactivity.

I don't think there's any way you can do what you want.

Re: Automatic License Deallocation based on inactivity?

BalaBhaskar_Qlik — Fri, 24 Aug 2018 16:59:22 GMT

You can, but try this by API like below:

Get a list of license allocation IDs:

GET /qrs/license/useraccesstype/full

Delete a specific license:

DELETE /qrs/license/useraccesstype/{IDfromAbove}

Re: Automatic License Deallocation based on inactivity?

BalaBhaskar_Qlik — Fri, 24 Aug 2018 16:59:46 GMT

Check this:

Deallocate Qlik Sense Token automatically

Re: Automatic License Deallocation based on inactivity?

BalaBhaskar_Qlik — Fri, 24 Aug 2018 17:02:00 GMT

If you want to remove a cal from a user, you can use the QMS API in QlikView to deallocate the cal. Keep in mind that deallocating the cal does not make it automatically available again. There is a 24 hour quarantine with QlikView 11.2 and a 7 day quarantine with QlikView 12 before the cal is allowed to be reallocated.

Definitely, do not attempt to modify pgo files.

To my knowledge there is no sample code for performing this activity. Here is the link to the QMS API: QlikView Management API - Getting Started and Examples

Re: Automatic License Deallocation based on inactivity?

Levi_Turner — Fri, 24 Aug 2018 19:51:06 GMT

Hey William,

Please see this script for a reference: https://github.com/levi-turner/QlikSenseScripts/blob/master/qlik_sense_purge_unused_user_access_passes.ps1

It can be adapted to the subscription licensing if needed and does depend on Qlik-CLI. But it can be used as a reference in either case.

Hope that helps.

Re: Automatic License Deallocation based on inactivity?

william_fu — Mon, 27 Aug 2018 19:54:24 GMT

Thanks guys,

Can't implement this solution just yet, but this seems to be the way to go.

Re: Automatic License Deallocation based on inactivity?

adam_groenbeck — Wed, 29 May 2019 08:15:35 GMT

Hello,

I'm trying to use the script, but it seems like nothing is happening after the script is done except for the confirmation of the connection to Qlik Sense.

Anything that I should check?

Re: Automatic License Deallocation based on inactivity?

balaji_MAC — Wed, 17 Jul 2019 11:42:55 GMT

Hi Levi,

we tried to implement token auto deallocation using powershell script and we got below error.

Error:

Invoke-RestMethod : The remote name could not be resolved: 'myserver.com'

Token unusaed deallocation script:

$InactivityThreshold = Read-Host -Prompt 'Input the username date threshold for inactivity (e.g. 90)'

# Get date format for 90 days ago
$date = Get-Date
$date = $date.AddDays(-$InactivityThreshold)
$date = $date.ToString("yyyy/MM/dd")
$time = Get-Date
$time = $time.GetDateTimeFormats()[109]
$inactive = $date + ' ' + $time

# Connect to Qlik Sense
$myFQDN=(Get-WmiObject win32_computersystem).DNSHostName+"."+(Get-WmiObject win32_computersystem).Domain
$myFQDN = $myFQDN.ToLower()

# Connect to Qlik-CLI
Connect-Qlik -ComputerName $($myFQDN)

function Remove-QlikUserAccessType {
[CmdletBinding()]
param (
[parameter(Position=0,ValueFromPipelinebyPropertyName=$true)]
[string]$id
)

PROCESS {
return Invoke-QlikDelete -path "/qrs/license/useraccesstype/$id"
}
}

Get-QlikUserAccessType -filter "lastUsed lt '$inactive'" -full # | Remove-QlikUserAccessType

Error:

Invoke-RestMethod : The remote name could not be resolved: 'myserver.com'
At C:\Program Files\WindowsPowerShell\Modules\Qlik-Cli\1.15.1\functions\core.ps1:30 char:17
+ ... $result = Invoke-RestMethod -Method $method -Uri $path @params -Ses ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-RestMethod], WebException
+ FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeRestMethodCommand

Do you have any idea how to resolve this error?

Please let us know your input on this.

Regards,

Balaji

Re: Automatic License Deallocation based on inactivity?

lhr — Fri, 19 Jul 2019 08:04:33 GMT

please note that this could be a violation of the license agreement.

Re: Automatic License Deallocation based on inactivity?

balaji_MAC — Fri, 19 Jul 2019 09:00:03 GMT

Hi,

Apologies.

i have udpdated content based on the below article.

https://github.com/levi-turner/QlikSenseScripts/blob/master/qlik_sense_purge_unused_user_access_passes.ps1

let us know if you have solution fo rthis issue.

Regards,

Balaji

Re: Automatic License Deallocation based on inactivity?

balaji_MAC — Thu, 01 Aug 2019 09:53:27 GMT

Hi Levi,

Hope you are doing well.

can we get any documents referrance to implement this solution.

we were able to run this script successfully but we didn't any token deallocation.

Note:we are using professional/analyzer license model.

thanks in advance.

Regards,

Balaji

Re: Automatic License Deallocation based on inactivity?

Levi_Turner — Thu, 01 Aug 2019 15:28:20 GMT

@balaji_MAC wrote:

...
we were able to run this script successfully but we didn't any token deallocation.

Note:we are using professional/analyzer license model.
...

Because the script was written for the token model.

This guy is a master script which should work no matter the license type:

#-------------------------------------------------------------------------------------------------------------------------------- # # Script Name: qlik_sense_purge_unused_user_access_passes.ps1 # Description: Remove the assigned user access passes of users who have not used the system in X days # Dependency: Qlik-Cli (https://github.com/ahaydon/Qlik-Cli) # # Version Date Author Change Notes # 0.1 2018-01-30 Levi Turner Initial Version # 0.2 2018-03-06 Levi Turner createdDate > lastUsed # #-------------------------------------------------------------------------------------------------------------------------------- $InactivityThreshold = Read-Host -Prompt 'Input the username date threshold for inactivity (e.g. 90)' # Get date format for 90 days ago $date = Get-Date $date = $date.AddDays(-$InactivityThreshold) $date = $date.ToString("yyyy/MM/dd") $time = Get-Date $time = $time.GetDateTimeFormats()[109] $inactive = $date + ' ' + $time # Connect to Qlik Sense $myFQDN=(Get-WmiObject win32_computersystem).DNSHostName+"."+(Get-WmiObject win32_computersystem).Domain $myFQDN = $myFQDN.ToLower() # Connect to Qlik-CLI Connect-Qlik -ComputerName $($myFQDN) function Remove-QlikUserAccessType { [CmdletBinding()] param ( [parameter(Position=0,ValueFromPipelinebyPropertyName=$true)] [string]$id ) PROCESS { return Invoke-QlikDelete -path "/qrs/license/useraccesstype/$id" } } function Get-QlikProfessionalAccessType { [CmdletBinding()] param ( [parameter(Position=0)] [string]$id, [string]$filter, [switch]$full, [switch]$raw ) PROCESS { $path = "/qrs/license/professionalaccesstype" If( $id ) { $path += "/$id" } If( $full ) { $path += "/full" } If( $raw ) { $rawOutput = $true } return Invoke-QlikGet $path $filter } } function Remove-QlikProfessionalAccessType { [CmdletBinding()] param ( [parameter(Position=0,ValueFromPipelinebyPropertyName=$true)] [string]$id ) PROCESS { return Invoke-QlikDelete -path "/qrs/license/professionalaccesstype/$id" } } function Get-QlikAnalyzerAccessType { [CmdletBinding()] param ( [parameter(Position=0)] [string]$id, [string]$filter, [switch]$full, [switch]$raw ) PROCESS { $path = "/qrs/license/analyzeraccesstype" If( $id ) { $path += "/$id" } If( $full ) { $path += "/full" } If( $raw ) { $rawOutput = $true } return Invoke-QlikGet $path $filter } } function Remove-QlikAnalyzerAccessType { [CmdletBinding()] param ( [parameter(Position=0,ValueFromPipelinebyPropertyName=$true)] [string]$id ) PROCESS { return Invoke-QlikDelete -path "/qrs/license/analyzeraccesstype/$id" } } Get-QlikUserAccessType -filter "lastUsed lt '$inactive'" -full | Remove-QlikUserAccessType Get-QlikAnalyzerAccessType -filter "lastUsed lt '$inactive'" -full | Remove-QlikAnalyzerAccessType Get-QlikProfessionalAccessType -filter "lastUsed lt '$inactive'" -full | Remove-QlikProfessionalAccessType

Re: Automatic License Deallocation based on inactivity?

itibook — Wed, 04 Sep 2019 20:35:36 GMT

Great script...

the only think missing is a function to reinstate the license for a specific user. Any pointers?

Re: Automatic License Deallocation based on inactivity?

Levi_Turner — Thu, 05 Sep 2019 00:23:22 GMT

To reinstate the license based on what?

Re: Automatic License Deallocation based on inactivity?

itibook — Thu, 05 Sep 2019 05:27:28 GMT

Sorry if I wasn't clear...

When I run the script and I call the users concerned become Quarantined in terms of license.

I was wondering how I could reinstate (that's the term in the QMC) a single user access via the Qlik-Cli or a custom PS script.

I guess it's probably a PUT operation like this one:

https://help.qlik.com/en-US/sense-developer/June2019/APIs/repositoryserviceapi/index.html?page=30

if something is already out there I'd rather avoid re-inventing the wheel... 🙂

ciao

Luca