topic Re: Limiting access to Stream and App on nodes (with different addresses DNS) in Management & Governance

Limiting access to Stream and App on nodes (with different addresses DNS)

KeyReaL — Wed, 29 Jan 2025 16:31:11 GMT

Good day, colleagues, tell me how to solve my problem, I still can’t find a suitable article.

We have two servers with Qlik Sense Enterprise (May 2021): Central (with DNS address https: // server1) and RIM (with DNS address https: // server2). The second (RIM) was raised to unload the load of the central server.

Now, at the entrance to the second server, you can open all the applications and streams that are on the central node, but how can you limit them if you enter from different DNS addresses?

For example:

There are streams on the central server: accounting, personnel department, technical department.

At the entrance to https: // server1 (which is registered on the central node as alias)- we go to the central server and see not everything, but only streams: accounting, personnel department A

At the entrance to https: // server2 (which is registered on the second node like alias) - we go to the second node (RIM server), but we will see only a stream: technical department.

Thanks for any hint.

Regards, Kirill

Re: Limiting access to Stream and App on nodes (with different addresses DNS)

Albert_Candelario — Sat, 10 Sep 2022 13:04:54 GMT

Hello @KeyReaL ,

Thanks for posting.

Have you think of limiting the stream per node on the security rules
(node.iscentral="false")

And edit the above as per your requirements.

Or using some customer properties to link nodes to streams. I haven't had the chance to test it, but could be something to explore.

This also might help to inspire you:

Security Rule Example: Basic rule setup for Apps a... - Qlik Community - 1717278

Cheers,

Albert

Re: Limiting access to Stream and App on nodes (with different addresses DNS)

KeyReaL — Mon, 12 Sep 2022 03:54:17 GMT

Hello, @Albert_Candelario,

Thanks for the hint.

We already have a configured limitation on streams, on applications and sheets, taking into account the created groups of Departament in "Customer Properties".

Used this article: https://community.qlik.com/t5/Qlik-Sense-Documents/Sheet-or-App-Object-Level-Security-Qlik-Sense/ta-p/1485114

I will try to prescribe Node binding to the rules.

Regards, Kirill.

Re: Limiting access to Stream and App on nodes (with different addresses DNS)

Albert_Candelario — Mon, 12 Sep 2022 05:12:53 GMT

Great @KeyReaL , let's us know how it goes.

Cheers,

Albert

Re: Limiting access to Stream and App on nodes (with different addresses DNS)

KeyReaL — Mon, 12 Sep 2022 08:46:15 GMT

Good day @Albert_Candelario

The problem has not been solved, according to your recommendation, made the following:

1. For testing created two users: "usertest1" and "usertest2"

2. I made up the "Customer Properties" parameter "Test1"

3. assigned this parameter to my users

4. In the stream to the rule, I wrote: ((user.@Group = "Test1") and (node.iscentral = "false"))

Result: my stream disappeared when connecting to "Central" and "RIM" server

I tried to use the parameter: ((user.@Group = "test1") and (node.name = "App-qlik-01"))

*The name RIM server-"App-qlik-01"

Found an article: https://community.qlik.com/t5/knowledge/load-balanking-rules-only-specific-stream-pps-to-be/ta-p/1715610

I study it.

If I find a solution, I will write

Regards, Kirill

Re: Limiting access to Stream and App on nodes (with different addresses DNS)

Albert_Candelario — Mon, 12 Sep 2022 08:42:23 GMT

Thanks @KeyReaL for your prompt replies, if can think of something else or find something relevant I would share too.

Kindly, keep us posted.

Cheers,

Albert