topic Re: Security role to allow access to apps in Management & Governance

Security role to allow access to apps

xyz_1011 — Thu, 08 Feb 2024 08:44:54 GMT

Hi all,

to allow users of our sense tenat wo open apps, we have created a group which is synched properly to the tenant. However, when i assign this group (via manage members) to a space, a user in this group cannot see any content in this space. If i add this user spcifically to the list of member of this space, the user can see the apps in this space.

Can anyone enlighten me, where i might hgave taken a wrong turn when assigning permissions and / or roles ? What are the necessary settings to allow members of a given group to have access to apps in a (managed) space that this group is assigned to ?

Thanks a lot for some help!

Re: Security role to allow access to apps

Anil_Babu_Samineni — Thu, 08 Feb 2024 09:30:17 GMT

@xyz_1011 When you say groups, Hope you have claim attribute already to the groups? So, Is this problem only for 1 group and 1 space or for all?

If it is for all, My best guess that in your IDP there might be for groups claim not working as it should.

Re: Security role to allow access to apps

Congrid — Tue, 13 Feb 2024 12:07:50 GMT

Hi,

You can verify using Qlik-cli if the user has the group mapped to their id within the Qlik tenant using the command below.

Replace the ID with your userid which you can get by clicking on the (i) next to your user name under Users sections in QMC.

qlik user get 633c27bee21ea60832ff9f57

Additionally, Access Evaluator dashboard is great in checking the security matrix.

You can see the Group Access tab in Access Evaluation sheet within this app to see which users have received access to the space via the group that you assigned.

https://community.qlik.com/t5/Support-Updates/Access-Evaluator-Monitoring-App-for-Qlik-Cloud/ba-p/1954291

Re: Security role to allow access to apps

vincent_ardiet_ — Tue, 13 Feb 2024 15:37:55 GMT

If you have not installed Qlik-Cli, you can also see which groups are associated to your users in the QMC: