topic Re: Use Qlik Dev APIs to create user and add them to a Group. in Integration, Extension & APIs

Use Qlik Dev APIs to create user and add them to a Group.

marcelinoa — Thu, 07 Mar 2024 11:29:27 GMT

Hi, I'm using the Qlik Dev APIs to grab a user that exists in our Microsoft Entra (Azure AD) and create it in our Qlik Cloud. I can do it by making a POST request to "/v1/users". But then I need to assign them to Groups and I'm not seeing how I can do it.

The "/v1/users" allows me to assign the user to a Role but not a Group, and with the "/v1/groups", I can only view, create, patch, delete, etc said groups, not add a user to them.

Is there a way for me to add a user to a certain Group using the Qlik Dev APIs?

Re: Use Qlik Dev APIs to create user and add them to a Group.

JonnyPoole — Thu, 07 Mar 2024 12:48:48 GMT

Group membership is determined by the Idp at the time of login. The group that the user belongs to come in the claim from the provider.

Group claims are not enabled by default in Qlik Cloud, you need to turn them on un QMC/settings on a tenant by tenant basis.

You also need to ensure your IdP configuration includes group claims.

Once that is all configured you can assign groups to have various authorisations in the tenant such as space permissions.

Re: Use Qlik Dev APIs to create user and add them to a Group.

Dave_Channon — Fri, 15 Mar 2024 09:37:38 GMT

Nothing to add to Jonny's comment, but I am interested in why you wish to pre-provision the groups @marcelinoa ? Is there a reason you need them before the user session?

Re: Use Qlik Dev APIs to create user and add them to a Group.

marcelinoa — Fri, 15 Mar 2024 09:49:08 GMT

@Dave_Channon I think it's a very specific situation of our client. Not everyone has yet used or accessed the Qlik envirenment, or may not do so, but it is still vital that they receive alerts from certain reports, but if the user has not yet accessed they don't get groups assigned to them, and won't receive the alerts.
But he will have them login just to "activate" the user since that seems to resolve the issue.

Re: Use Qlik Dev APIs to create user and add them to a Group.

Dave_Channon — Fri, 15 Mar 2024 09:52:50 GMT

OK, so you have one other option and that is to use a JWT IdP to impersonate a login of the user. This will associate the user with their groups prior to login, but it's something you'd need to manage and run from your side (or via automations with custom code blocks).