topic Re: Qliksense Security rules in Management & Governance

Qliksense Security rules

Fri, 17 Mar 2017 15:46:58 GMT

Hi,

We are starting to set up our security rules for our organisation.

We have three types of users in the allocated AD Groups:

Those who will only read apps (and not create apps) : AD Group = QSENSE_Basic
Those who will read apps and create their own but unable to publish : AD Group = QSENSE_Intermediate
Admin type users who can create / publish / delete etc : AD Gourp = QSENSE_Advanced

Can anyone advise how to set up the security rules for this?

I can see that there are already a lot of 'out of the box' security rules - so are there any I need to disable to achieve this?

Many thanks for your help!

TJM

Re: Qliksense Security rules

berndshexe — Thu, 30 Mar 2017 12:28:55 GMT

hi,

I hope, this will help:

https://community.qlik.com/docs/DOC-18222

In every rule you can set the parameter create, read and so on.

Regards,

Petra

Re: Qliksense Security rules

berndshexe — Fri, 31 Mar 2017 11:53:54 GMT

i created a doc for the deifferent steps.

Hopes, it may help !

Re: Qliksense Security rules

Thu, 20 Apr 2017 22:41:39 GMT

Hi Petra,

Where is the user.@AD_Group from? It's a custom property? and how this connects to the AD Group?

Thanks.

Re: Qliksense Security rules

berndshexe — Fri, 21 Apr 2017 07:21:38 GMT

Hi David,

@AD_Group is a custom propertie, to show the case how to use security rulles for groups.

But if you have AD Groups, You will find them under user.group, with value you can see the groups in your AD.

means: ((user.group="XXX Consultants")) gives users in this Group access.

Hope, this helps,

regards,

Petra

Re: Qliksense Security rules

Fri, 21 Apr 2017 16:47:39 GMT

Thanks Petra.

Weird thing is I don't have "group" , only name.ID,role and etc.

Any idea why the group didn't show up?

Re: Qliksense Security rules

berndshexe — Mon, 24 Apr 2017 06:23:07 GMT

Hi David,

I don't know, why you don't see groups.

Please check your user directory connector.

We created a sync with all users and did not check "only existing users".

Maybe that's the difference?

Re: Qliksense Security rules

Tue, 25 Apr 2017 21:41:27 GMT

Thanks, Petra.

Just figured out the problem. If I included the whole directory, the "group" appears.

Re: Qliksense Security rules

berndshexe — Wed, 26 Apr 2017 07:50:34 GMT

Hi David,

great, I'm glad, that you found the solution.