NPrinting Reports, Tasks and Connections that use Section Access Fail or Access Denied errors

Frank_S — Fri, 29 Sep 2023 16:08:08 GMT

Symptoms Reported

NPrinting Report(s) inside a publish task with connections to QVWs or QVFs that use Section Access do not work as expected.
NPrinting Connections fail to execute normally despite connection verification completing successfully
Section access check box is selected in the NPrinting connection however section access is not respected
NPrinting publish task recipients are ignored in the report production despite that they are included in the Qlik Sense app load script
NPrinting Connections, Publish Tasks fail. NPrinting error logs shows 'failed to open document'

Environment

Diagnosis:

Is the Qlik Sense app in a 'Published' State or is it 'Unpublished'?
Is the NPrinting Service account part of the load script in either the Qlik Sense or QlikView application
Check if the NPrinting, QlikView, Qlik Sense servers and domain accounts are in the same domain
Look for On Open triggers (QlikView) that might block the document from opening. Unsupported QlikView Document item... - Qlik Community - 1714896

Resolution:

To ensure expected section access processing, the Qlik Sense app MUST be 'Published' in the QMC>Apps interface. Connecting to Qlik Sense apps with section access
Ensure that section access is configured accurately in the load script. (see example below)
Each user that requires access to NPrinting reports (including the NPrinting service user account) are accurately added to the load script
Ensure the NP service account is a member of the NP server local administrators group
If Qlik Sense
- ensure the NP service account is rootadmin on the Qlik Sense server
- ensure the NP service account or other users in the load script are not limited by any Qlik Sense rules
If QlikView, ensure the NP service account is member of the QlikView administrators group on the QlikView Server(s)
Ensure the NPrinting, QlikView, Qlik Sense servers and related service accounts are all members of the same domain

Sample working Section Access Code:

// The following format is required for NP connection identity/domain account used in the NPrinting Connection. Recommend using the NPrinting Service User Account as the connection identity when section access is used in QV or QS source documents //Example below - domain\npsensesvc is NP service account and is used as the NPrinting Connection Identity // ADMIN, domain\npsensesvc, * //The dimension 'Year' must be type accurately thus match the 'case' used in the source QS app section access; LOAD * inline [ ACCESS, USERID, REDUCTION ADMIN, domain\npsensesvc, * USER, domain\user1, 1 USER, domain\user2, 2 ]; section application; star is *; LOAD * inline [ REDUCTION, Year 1, 2019 2, 2020 3, 2021 4, * ];

Investigation (internal) ID:

OP-9990