topic Re: Faster app level security rule ? in Management & Governance

Faster app level security rule ?

thomaslg_wq — Fri, 16 Jul 2021 13:11:24 GMT

Hi everyone,

I would like to know your ideas on how to create an app level security with the fastest security rule evaluation.

Some points about the environment :

OEM client with :
- >100 end customers (groups of around 5 to 20 users)
- >100 streams : most of them specific for some customers, a few that can be shared across customers
- >1000 apps
- >1000 users

If we were doing some app level security with custom properties, we would have >1000 custom properties values
- by user
- or
- by app
  which is totally out of the Qlik recommmandations
Is there another way ?
Are >1000 Active Directory Groups faster to evaluate than >1000 custom properties values ?

In general, how do you deal with large volume of users/apps and still have a good performance of rules evaluation ?

I may have an idea of how I am going to implement this but I want your fresh ideas first 🙂

Thanks for your ideas !

Regards,

Thomas

Re: Faster app level security rule ?

e_petrasevicius21 — Tue, 27 Jul 2021 12:44:36 GMT

Hi, @thomaslg_wq ,

Same issue on our side - we tried both (Groups and CP)

From general Groups are evaluated faster - but we ran into second bottleneck - too many Active Directory attributes are import as User attribute. In some cases user has around 900 attributes which only 20 of them are related with Qlik security - however during Log in all of the groups are checked against security rules and we lose performance in HUB opening (around 40s in such cases).

Maybe you found a way to workaround this? Or you have better results with CP evaluation?

Re: Faster app level security rule ?

thomaslg_wq — Tue, 17 Aug 2021 07:06:30 GMT

Hi Edgaras,

Thanks for your input.

It has not been implemented yet, we are currently redesigning our whole Qlik platform, this question remains one of our main concerns.

How much faster would you say the groups are evaluated (how much % of improvement did you see with groups in app opening for instance ?)

I hear you on the second bottleneck... It seems there is no perfect way to do it..

I was hoping to find some good workarounds but my post did not drag much reponse, I guess we'll have to test various workarounds ourselves 🙂

Thanks again,

Re: Faster app level security rule ?

gandalfgray — Fri, 03 Dec 2021 15:03:24 GMT

Hi guys! How did this go for you?

We are working on a similar project, so it would be interesting to hear about your findings 🙂

Re: Faster app level security rule ?

Maria_Halley — Tue, 07 Dec 2021 10:52:01 GMT

@gandalfgray

@thomaslg_wq

There is some information in the Help about this subject.

So that's a good place to start.

https://help.qlik.com/en-US/sense-admin/November2021/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Administer_QSEoW/Managing_QSEoW/QMC-performance-best-practices.htm