topic Qlikview AD or DMS authorisation? in QlikView

Qlikview AD or DMS authorisation?

Anonymous — Mon, 26 Jan 2026 18:19:17 GMT

At this moment we are using the AD for the authorisation in Qlikview.

We only have one problem at this moment ... we cannot change the AD authorisation ourselves, another departement (ICT) is responsible for AD changes company wide (so also for our Qlikview AD). So if we have changes (new user/document etc) this means we have to ask ICT to make these changes in AD. The problem here is that we often have changes and ICT says its a really big amount of work to change the AD.

I saw that there is also the possibility to use DMS authorisation in which the Qlikview itself manages the file system of Qlikview ...

Does anyone have experience with DMS authorisation? Is this easy to use and not a lot of work?

I also have the question if Qlikview is better of using AD or DMS authorisation?

rgrds,

Anita

Qlikview AD or DMS authorisation?

Tue, 24 May 2011 13:01:12 GMT

Hi Anita,

we use DMS and its working fine and its also very flexible to use from my point of view. I never used AD

regards

Sravan

Qlikview AD or DMS authorisation?

Anonymous — Tue, 24 May 2011 13:04:06 GMT

We only used AD ... I can't test it out because we don't have a seperate test system available 😉

Since we are looking for a solution to avoid extra workload for our ICT departement we are looking for a solution.

DMS authorisation ... does this mean that you have to enter for each file the users?

Qlikview AD or DMS authorisation?

Tue, 24 May 2011 13:14:18 GMT

Hi Anita,

No the users are centrally created as shown below in the diagram. For that create custom path as in the general tab below and in the users tab below add users.

After the user is centrally created in the above tab, you have to assign each user for each application present in the below tab

Thats it and you dont need more settings

Regards

Sravan

Qlikview AD or DMS authorisation?

ashfaq_haseeb — Tue, 24 May 2011 13:17:08 GMT

Hi Anita,

You need not to buy a test server to do this.

just go to system --> Setup --> qlikview server --> Security tab

change the authorization from NTFS to DMS apply and save setting

Now go to Document's tab.

select an application, there you find authorization's tab add user here.

Apply save and restart services once.

Note: DMS authorization will not work with SBE.

Hope that helps

Regards

ASHFAQ

Qlikview AD or DMS authorisation?

Anonymous — Tue, 24 May 2011 13:20:29 GMT

Good to know ... That means every user gets a new username + password for Qlikview.

Not really ideal in our situation ... we'll take this into account with our internal discussion about this theme.

Qlikview AD or DMS authorisation?

Tue, 24 May 2011 13:25:10 GMT

Yes everyuser gets a new username and password. The password can be changed later again by the user..

I found it flexible. I dont know why it does not suit your situation.

Qlikview AD or DMS authorisation?

Anonymous — Tue, 24 May 2011 13:29:15 GMT

For our users it's not desirable to have lots of usernames/passwords for all different systems we have within our organisation ...

In this case it's probably more likeable to use AD since all systems use the same AD login.

For maintenance it's way better for ourselves because now it takes a lot of time (since other departements should do the changes in the AD) ...

Qlikview AD or DMS authorisation?

danielrozental — Tue, 24 May 2011 13:44:06 GMT

Anita, just to clarify.

- You need an Enterprise QlikView Server license to have DMS in place.

- You do not need to create new usernames or set any passwords, you can still use AD users and integrated sign on.

- DMS will allow you to add authorization to documents using AD Groups and individual users.

Qlikview AD or DMS authorisation?

Anonymous — Tue, 24 May 2011 13:52:26 GMT

We do have an Enterprise Qlikview Server + Publisher license.

But how do you identify the users in DMS?? Don't you have to create the users/passwords??

Don't see the connection AD / DMS totally clear . . .

I do understand that you say AD can be used and DMS can be used as extra layer of authorisation ...

But don't you get lost in this web of authorisation?? It sounds to me that the overview of authorisation gets lost in this way ...

How to keep track of the AD / DMS authorisations made . . .

Qlikview AD or DMS authorisation?

danielrozental — Tue, 24 May 2011 13:56:35 GMT

You add users or groups like the image shows, DOMAIN\USER.

If you have QV10 you can track autorizations made in the "USERS" tab where you can search users and check what authorizations they have.

Qlikview AD or DMS authorisation?

Anonymous — Tue, 24 May 2011 14:00:22 GMT

That's clear ... but I'm afraid we lose control of which person is authorised to see what qlikview applications ...

When using AD and DMS both I think it's pretty easy to lose control in this way ...

Qlikview AD or DMS authorisation?

danielrozental — Tue, 24 May 2011 14:03:57 GMT

As I said in my previous post, with QV10 "USERS" tab you can see what documents a user has authorization to.

If you're still with QV9 or don't feel that's enough for you then you should probably leave it as it is, with NTFS security.

Qlikview AD or DMS authorisation?

Anonymous — Tue, 24 May 2011 14:08:59 GMT

We're still with QV9 ... end of the year we plan to go over to QV10 ...

Good to know QV10 has a tab "USERS" which contains some sort of overview!!

thx

Re: Qlikview AD or DMS authorisation?

Troy1 — Tue, 09 Jun 2015 19:45:44 GMT

Hi Anita

What did you decide to do, did you move to DMS?

We are facing the same issue with AD, where creating & modifying groups resides in different department and takes lot longer.

Another issue I see with DMS is that when you change the version of dashboard, you will have to reassign all the users, in our case 400 users. is there a work around?

Re: Qlikview AD or DMS authorisation?

petter — Tue, 09 Jun 2015 21:37:59 GMT

It is important that one keep the two terms apart:

- Authentication

Who am I / Who is the user - identification - just a valid identification - this is what AD does

- Authorization

What can be accessed / What can the user access - for authorization to be enforced it has to know

the identity of the user that must be passed on by the identity provider - which could be AD.

NTFS with the help of AD and DMS with the help of AD and or other directories provides this.

It is advised that you read the technical papers and white papers that are available from Qlik to fully understand the concepts before you implement changes.

Re: Qlikview AD or DMS authorisation?

petter — Tue, 09 Jun 2015 21:45:04 GMT

Authentication and Authorization

Re: Qlikview AD or DMS authorisation?

Anonymous — Thu, 11 Jun 2015 05:56:47 GMT

We kept using AD authorisation and authentication.

With QV11 we started using a seperate development and production server. We deploy the QVW's to the production server, and with that step we do the AD authorisation ... we specify which users the QVW should be deployed for.

We can do this ourselvers with the QV management console.

Re: Qlikview AD or DMS authorisation?

Troy1 — Thu, 11 Jun 2015 15:55:06 GMT

Can you provide more details. Are you using local groups to resolve authorization.

Re: Qlikview AD or DMS authorisation?

Anonymous — Mon, 15 Jun 2015 06:19:09 GMT

We don't use AD-groups but authorize on AD-user.

We deploy the QlikView to our Production environment, and with this step we authorize the AD-user.

In the QEMC, Documents->Source Documents, select the QVW task.

On the tab 'Distribute' use the 'Distribute to Folder' (fill in the correct path).

The 'User Type' should be 'Named Users' ... select the user icon to add / remove users from the distribution list.

This distribution list authorizes the users/groups you select to use the distributed QVW.