<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>article Qlik Sense: Security rules needed to call task start and result endpoints in Official Support Articles</title>
    <link>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Security-rules-needed-to-call-task-start-and-result/ta-p/1717434</link>
    <description>&lt;P&gt;&lt;BR /&gt;The resource filters needed to start a task and check its status using the&lt;FONT face="courier new,courier"&gt; /qrs/executionsession/ &lt;/FONT&gt;and &lt;FONT face="courier new,courier"&gt;/qrs/executionresult&lt;/FONT&gt;&amp;nbsp;endpoints as seen under&amp;nbsp;&lt;A href="https://help.qlik.com/en-US/sense-developer/Subsystems/RepositoryServiceAPI/Content/Sense_RepositoryServiceAPI/RepositoryServiceAPI-Task-Start-Task.htm" target="_blank" rel="noopener"&gt;Task: Start&lt;/A&gt; are not all documented as seen under&amp;nbsp;&lt;A href="https://help.qlik.com/en-US/sense/Subsystems/ManagementConsole/Content/Sense_QMC/available-resource-filters.htm" target="_blank" rel="noopener"&gt;Available resource filters&lt;/A&gt;, which may make creating custom rules difficult. Using RootAdmin works, but this cannot be used in scenarios where only the least amount of permissions are needed.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;H3&gt;Environment:&lt;/H3&gt;
&lt;P&gt;&lt;LI-PRODUCT title="Qlik Sense Enterprise on Windows" id="qlikSenseEnterpriseWindows"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;, all versions&lt;/P&gt;
&lt;P class="qlik-migrated-tkb-headings"&gt;&amp;nbsp;&lt;/P&gt;
&lt;H3 class="qlik-migrated-tkb-headings"&gt;Cause:&lt;/H3&gt;
&lt;P&gt;&lt;BR /&gt;Undocumented resource was needed to call the endpoints.&lt;/P&gt;
&lt;P class="qlik-migrated-tkb-headings"&gt;&amp;nbsp;&lt;/P&gt;
&lt;H3 class="qlik-migrated-tkb-headings"&gt;Resolution:&lt;/H3&gt;
&lt;P&gt;&lt;BR /&gt;These steps will create a rule capable of running the endpoints listed under&amp;nbsp;&lt;A href="https://help.qlik.com/en-US/sense-developer/Subsystems/RepositoryServiceAPI/Content/Sense_RepositoryServiceAPI/RepositoryServiceAPI-Task-Start-Task.htm" target="_blank" rel="noopener"&gt;Task: Start&lt;/A&gt;&amp;nbsp;with the minimum of rights needed.&lt;BR /&gt;&lt;BR /&gt;1. Create a new security rule called &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;TaskAdmin&lt;/SPAN&gt;.&lt;BR /&gt;&lt;BR /&gt;2. For the Resource filter, add: &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;App_*, ReloadTask_*, ExecutionResult_*, ExecutionSession_*&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;3. For Actions, check: &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;Read&lt;/SPAN&gt; and &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;Update&lt;/SPAN&gt;.&lt;BR /&gt;&lt;BR /&gt;4. For Conditions, put: &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;((user.roles="TaskAdmin"))&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;5. Save the rule.&lt;/P&gt;</description>
    <pubDate>Wed, 05 May 2021 14:30:11 GMT</pubDate>
    <dc:creator>Sonja_Bauernfeind</dc:creator>
    <dc:date>2021-05-05T14:30:11Z</dc:date>
    <item>
      <title>Qlik Sense: Security rules needed to call task start and result endpoints</title>
      <link>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Security-rules-needed-to-call-task-start-and-result/ta-p/1717434</link>
      <description>&lt;P&gt;&lt;BR /&gt;The resource filters needed to start a task and check its status using the&lt;FONT face="courier new,courier"&gt; /qrs/executionsession/ &lt;/FONT&gt;and &lt;FONT face="courier new,courier"&gt;/qrs/executionresult&lt;/FONT&gt;&amp;nbsp;endpoints as seen under&amp;nbsp;&lt;A href="https://help.qlik.com/en-US/sense-developer/Subsystems/RepositoryServiceAPI/Content/Sense_RepositoryServiceAPI/RepositoryServiceAPI-Task-Start-Task.htm" target="_blank" rel="noopener"&gt;Task: Start&lt;/A&gt; are not all documented as seen under&amp;nbsp;&lt;A href="https://help.qlik.com/en-US/sense/Subsystems/ManagementConsole/Content/Sense_QMC/available-resource-filters.htm" target="_blank" rel="noopener"&gt;Available resource filters&lt;/A&gt;, which may make creating custom rules difficult. Using RootAdmin works, but this cannot be used in scenarios where only the least amount of permissions are needed.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;H3&gt;Environment:&lt;/H3&gt;
&lt;P&gt;&lt;LI-PRODUCT title="Qlik Sense Enterprise on Windows" id="qlikSenseEnterpriseWindows"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;, all versions&lt;/P&gt;
&lt;P class="qlik-migrated-tkb-headings"&gt;&amp;nbsp;&lt;/P&gt;
&lt;H3 class="qlik-migrated-tkb-headings"&gt;Cause:&lt;/H3&gt;
&lt;P&gt;&lt;BR /&gt;Undocumented resource was needed to call the endpoints.&lt;/P&gt;
&lt;P class="qlik-migrated-tkb-headings"&gt;&amp;nbsp;&lt;/P&gt;
&lt;H3 class="qlik-migrated-tkb-headings"&gt;Resolution:&lt;/H3&gt;
&lt;P&gt;&lt;BR /&gt;These steps will create a rule capable of running the endpoints listed under&amp;nbsp;&lt;A href="https://help.qlik.com/en-US/sense-developer/Subsystems/RepositoryServiceAPI/Content/Sense_RepositoryServiceAPI/RepositoryServiceAPI-Task-Start-Task.htm" target="_blank" rel="noopener"&gt;Task: Start&lt;/A&gt;&amp;nbsp;with the minimum of rights needed.&lt;BR /&gt;&lt;BR /&gt;1. Create a new security rule called &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;TaskAdmin&lt;/SPAN&gt;.&lt;BR /&gt;&lt;BR /&gt;2. For the Resource filter, add: &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;App_*, ReloadTask_*, ExecutionResult_*, ExecutionSession_*&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;3. For Actions, check: &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;Read&lt;/SPAN&gt; and &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;Update&lt;/SPAN&gt;.&lt;BR /&gt;&lt;BR /&gt;4. For Conditions, put: &lt;SPAN style="font-family: courier new,courier,monospace;"&gt;((user.roles="TaskAdmin"))&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;5. Save the rule.&lt;/P&gt;</description>
      <pubDate>Wed, 05 May 2021 14:30:11 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Security-rules-needed-to-call-task-start-and-result/ta-p/1717434</guid>
      <dc:creator>Sonja_Bauernfeind</dc:creator>
      <dc:date>2021-05-05T14:30:11Z</dc:date>
    </item>
    <item>
      <title>Re: Qlik Sense: Security rules needed to call task start and result endpoints</title>
      <link>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Security-rules-needed-to-call-task-start-and-result/tac-p/1854287#M4711</link>
      <description>&lt;P&gt;For the new type of task - external task need add to 2nd steps resource filter&amp;nbsp;externalProgramTask_*&lt;/P&gt;</description>
      <pubDate>Mon, 01 Nov 2021 14:57:28 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Security-rules-needed-to-call-task-start-and-result/tac-p/1854287#M4711</guid>
      <dc:creator>polyakov</dc:creator>
      <dc:date>2021-11-01T14:57:28Z</dc:date>
    </item>
  </channel>
</rss>

