<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Managed Space Azure Group Members losing access to Space in Management &amp; Governance</title>
    <link>https://community.qlik.com/t5/Management-Governance/Managed-Space-Azure-Group-Members-losing-access-to-Space/m-p/2410967#M29970</link>
    <description>&lt;P&gt;Are group claims properly sent from the identity provider to Qlik? When a user that loses access logs in, how does their token look like? For example, if a user belongs to more than 200 groups, those will not be sent on the claim (Microsoft documentation &lt;A href="https://learn.microsoft.com/en-us/security/zero-trust/develop/configure-tokens-group-claims-app-roles" target="_self"&gt;here&lt;/A&gt;).&lt;/P&gt;
&lt;P&gt;Once the user is logged in, they can quickly check by visiting the url &lt;/P&gt;
&lt;P&gt;&lt;A href="https://&amp;lt;tenantname&amp;gt;.&amp;lt;region&amp;gt;.qlikcloud.com/api/v1/users/me" target="_blank"&gt;https://&amp;lt;tenantname&amp;gt;.&amp;lt;region&amp;gt;.qlikcloud.com/api/v1/users/me&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;And verify whether the right groups are under "assignedGroups" and "groups".&lt;/P&gt;</description>
    <pubDate>Thu, 25 Jan 2024 09:13:04 GMT</pubDate>
    <dc:creator>Miguel_Angel_Baeyens</dc:creator>
    <dc:date>2024-01-25T09:13:04Z</dc:date>
    <item>
      <title>Managed Space Azure Group Members losing access to Space</title>
      <link>https://community.qlik.com/t5/Management-Governance/Managed-Space-Azure-Group-Members-losing-access-to-Space/m-p/2164412#M29969</link>
      <description>&lt;P&gt;Member Groups on some Managed Spaces are losing access to the space.&lt;/P&gt;
&lt;P&gt;Users/Groups are being provisioned Azure AD.&amp;nbsp; As I add users/groups on the AD side they show up in Qlik.&amp;nbsp; All seems in order.&lt;/P&gt;
&lt;P&gt;I've created some Managed Spaces and added Groups with View privileges.&amp;nbsp; Initially all the members can see the space and interact with the Apps.&amp;nbsp; But after a day or so they can no longer see the space.&lt;/P&gt;
&lt;P&gt;What could be causing this?&amp;nbsp;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Changing permissions on the group did not help.&lt;BR /&gt;Removing the group and adding it to the space again did not help.&lt;BR /&gt;I can add individuals to the space and that works, but would really prefer to use Groups for simplicity's sake.&lt;/P&gt;</description>
      <pubDate>Tue, 23 Jan 2024 13:27:24 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Management-Governance/Managed-Space-Azure-Group-Members-losing-access-to-Space/m-p/2164412#M29969</guid>
      <dc:creator>ethanksteiner</dc:creator>
      <dc:date>2024-01-23T13:27:24Z</dc:date>
    </item>
    <item>
      <title>Re: Managed Space Azure Group Members losing access to Space</title>
      <link>https://community.qlik.com/t5/Management-Governance/Managed-Space-Azure-Group-Members-losing-access-to-Space/m-p/2410967#M29970</link>
      <description>&lt;P&gt;Are group claims properly sent from the identity provider to Qlik? When a user that loses access logs in, how does their token look like? For example, if a user belongs to more than 200 groups, those will not be sent on the claim (Microsoft documentation &lt;A href="https://learn.microsoft.com/en-us/security/zero-trust/develop/configure-tokens-group-claims-app-roles" target="_self"&gt;here&lt;/A&gt;).&lt;/P&gt;
&lt;P&gt;Once the user is logged in, they can quickly check by visiting the url &lt;/P&gt;
&lt;P&gt;&lt;A href="https://&amp;lt;tenantname&amp;gt;.&amp;lt;region&amp;gt;.qlikcloud.com/api/v1/users/me" target="_blank"&gt;https://&amp;lt;tenantname&amp;gt;.&amp;lt;region&amp;gt;.qlikcloud.com/api/v1/users/me&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;And verify whether the right groups are under "assignedGroups" and "groups".&lt;/P&gt;</description>
      <pubDate>Thu, 25 Jan 2024 09:13:04 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Management-Governance/Managed-Space-Azure-Group-Members-losing-access-to-Space/m-p/2410967#M29970</guid>
      <dc:creator>Miguel_Angel_Baeyens</dc:creator>
      <dc:date>2024-01-25T09:13:04Z</dc:date>
    </item>
  </channel>
</rss>

