topic Re: Security rules for streams in Management & Governance

Security rules for streams

DostonbekYusupov — Wed, 29 Jan 2025 16:38:32 GMT

Good day, Dear Community!

I was going to know if there any possibilities to create such a rule where - only certain users with certain environment.IPs could access to particular streams in Qlik Sense

I have tried the method below, so far no success:

Ex:

(user.name="user_01" and user.environment.ip="123.123.123.123")

(user.name="user_01" and user.environment.ip="123.123.123.456")

And if there is someone who is trying to access "user01" by using IP: 123.123.123.789 then he should not get access to the stream

P.S. This is the case where one Qlik analyzer account is shared among multiple users in an organization.

Re: Security rules for streams

Maria_Halley — Wed, 29 Jun 2022 07:28:18 GMT

@DostonbekYusupov

For this to work the following requirement need to be met:
Activate the < Extended Security Environment > in your Virtual Proxy configuration (Advanced section)
This rule will not apply to RootAdmin users.

Re: Security rules for streams

DostonbekYusupov — Wed, 29 Jun 2022 13:34:13 GMT

Hi there! Maria

Thank you for your reply, but it did not work

Re: Security rules for streams

Maria_Halley — Thu, 30 Jun 2022 07:31:40 GMT

@DostonbekYusupov

Do you get access where you shouldn't have it, or do you not get access even if you should? Also what version of QlikSense is this?

It is important to keep in mind that you cannot restrict access with a rule. If there is another rule giving access, then you will still get access.

Go to the rule and click on Security rules, under associated items, to see all rules affecting this stream.

If you don't get access where you should, then try to use the IPv6 address

Re: Security rules for streams

Maria_Halley — Thu, 30 Jun 2022 09:33:25 GMT

@DostonbekYusupov

Are you by any chance using a reverse proxy?

Re: Security rules for streams

Maria_Halley — Thu, 30 Jun 2022 10:48:43 GMT

@DostonbekYusupov

I tested with *.123.123.123 instead (but my IP of course). I changed the "=" to "like" and then it worked

Re: Security rules for streams

rohitk1609 — Mon, 04 Jul 2022 15:51:06 GMT

(user.name="user_01" and user.environment.ip like "*.123.123.123")

This one is working?