topic Re: Qlikview Application Security in QlikView

Qlikview Application Security

Mon, 26 Jan 2026 18:19:17 GMT

We have multiple applications in the same folder(root folder), but we want to show some application for some users in accesspoint and others shouldn't view the application in accesspoint. Can we do apply security in app level?

I believe we can do this in adding or removing user group in application properties.

Thanks

Sat

Re: Qlikview Application Security

prieper — Thu, 11 Feb 2016 21:59:08 GMT

Please check SECTION ACCESS.

Users are able to see only those documents, for which they have access.

Peter

Re: Qlikview Application Security

satishkurra — Thu, 11 Feb 2016 22:05:34 GMT

Please check the attached document

Re: Qlikview Application Security

rwunderlich — Thu, 11 Feb 2016 22:17:53 GMT

If you don't have Publisher, you can control access by setting the Windows Security permissions on the file. This is sometimes made easier by putting the apps in separate folders so you don't have to worry about file permissions getting overlayed by folder permissions.

-Rob

http://masterssummit.com

http://qlikviewcookbook.com

Re: Qlikview Application Security

sfatoux72 — Thu, 11 Feb 2016 23:04:40 GMT

Document Level Authorization

Once a user has been authenticated, QlikView Server typically handles authorization on its own. QlikView Server provides the choice between storing the ACL information as Windows NTFS privileges (applicable only when the user is authenticated using a Windows user identity) or by storing the ACL information in the internal repository, Document Metadata Service (DMS), in QlikView. The choice of NTFS or DMS affects the access to all documents in QlikView Server.

NTFS vs. DMS

QlikView Server can use the NTFS privileges of the Windows file system to store authorization information. When in NTFS authorization mode, QlikView Server controls access to a given QlikView document by determining if the authenticated user has NTFS privileges to the underlying QlikView document file (.qvw). This is based on the operating system privileges and Windows NTFS is used for the ACL. The privileges of the authenticated user are configured by a server administrator using standard Windows Explorer functionality via directory properties options.

As an alternative to Windows NTFS, QlikView can use its own ACL, DMS. Unlike NTFS, this allows non-Windows users and groups to be authorized to access applications and data. DMS integrates fully with the existing Directory Service Provider (for example, Active Directory, other LDAP) where Group Membership has been recorded – this is a mechanism by which QlikView Server can re-use existing enterprise accounts and group structures. The permitted users or groups are recorded in a meta file that resides next to the QlikView document, and it is managed using QMC.

NTFS is the default document authorization model, suitable when all users and groups are identified in Active Directory or locally on the QlikView Server host. The NTFS permissions may be inherited from the directory that the QlikView documents are in, or may be assigned using QlikView Publisher distribution tasks.

DMS is required when the authenticated user identity is not a Windows user account. The DMS permissions are explicitly assigned using QMC, or may be assigned using QlikView Publisher distribution tasks.

DMS is only available with QlikView Server Enterprise Edition

Re: Qlikview Application Security

rwunderlich — Thu, 11 Feb 2016 23:15:41 GMT

Good point. If you have EE Server, you can use DMS for authorization. Much easier than changing windows permissions, because you can manage it from the QMC.

-Rob

Re: Qlikview Application Security

jagan — Fri, 12 Feb 2016 05:39:25 GMT

Hi,

Try Section Access for this. There are lot of examples in Community and in Qlikview help file.

Authentication and Authorization in Qlikview

If you just want user level then use below script

Section Access;

LOAD * INLINE [

ACCESS, USERID

ADMIN, Admin

USER, Sales

USER, Market

];

Section Application;

Regards,

jagan.

Re: Qlikview Application Security

saimahasan — Fri, 12 Feb 2016 06:21:16 GMT

Yes you can restrict the users with the help of Section Access.

With this respect, only the authorized users will b able to view the apps.

Re: Qlikview Application Security

kaushiknsolanki — Fri, 12 Feb 2016 06:46:01 GMT

Hi,

If you do not have Enterprise Edition and if you are having Small Business Edition then you can also use the Windows Setting to restrict use to view applications on accesspoint.

All you have to do is for each of the application, go to properties and remove the Users Group from security and add only users which should have access to that document (Application).

Once you do this, restart Qlik Services to take immediate effect.

Regards,

Kaushik Solanki

Re: Qlikview Application Security

Fri, 12 Feb 2016 15:41:58 GMT

Thank you all for your replies. We will go with section access if we can't do anything on windows level because we are not going to apply the data level security.

We are going to migrate current server to new server with DMS authentication. We will try Sébastien Fatoux recommendation.