topic Re: User Access to Apps in QlikView

User Access to Apps

dmohanty — Wed, 31 Jul 2013 13:39:03 GMT

Hi All,

Let I have 2 Apps deployed. Now I have 10 users. Now I need to give access to users, let 4 users would access only App1 and 6 users would access only App2.

How this can be achived from QMC perspective? Please elaborate.

Regards!!!

Re: User Access to Apps

Anonymous — Wed, 31 Jul 2013 13:59:52 GMT

Hi,

Do you have an Active Directory structure set-up? If you do then I'd start by adding that to the QMC on the system tab, directory service connectors. You will need the path to your LDAP and an administrator sign on.

Once you have done that you can go to the document tab to assign users document cals based on the document you want them to see. Highlight the document then in the right hand windows click document CALs. Allocate the document some CALs. Then click the little people icon to open the manage users dialogue and search for users or groups. Don't forget to use the * wild card or you will need to use the full name to get search results.

Paul

Re: User Access to Apps

dmohanty — Wed, 31 Jul 2013 14:05:59 GMT

Hi Paul,

As of now, I have given a set of 20 users in to the Custom Directory with a common password so that they would use to log in to Access Point.

Now the Active Directory is blank and no path is give. Could you please elaborate what path we need to set there?

Also, where to feed the document CALS? in the User Documents?

Re: User Access to Apps

Anonymous — Wed, 31 Jul 2013 14:41:36 GMT

Hi,

Our active directory path is LDAP://adnams.local. I found it out by looking at the dns suffix on an ipconfig / all command. There are probably easier ways. Your network admins will know.

For document cals click the documents tab along the top of QMC. Expand the QVS@??? entry in the left hand pane and keep expanding to find your access points. Under accesspoint you should find your qvw documents. Now click on the one you want to add cals to. The document details will appear in the right hand pane. From there select document cals and you can assign the number of cals and users.

Paul

Re: User Access to Apps

dmohanty — Wed, 31 Jul 2013 15:09:38 GMT

Hi Paul,

I did nt find the Document CALS section. Do you mean by Authorization Tab as shown below?

FYI...Our QVS Security is DMS, not NTFS. thats why probably I am not seeing CALs.

Is it required to change to NTFS or how can we achieve in DMS mode?

Re: User Access to Apps

dmohanty — Thu, 01 Aug 2013 08:55:39 GMT

Hi,

Any more suggestions/help please????

Regards!!!

Re: User Access to Apps

Anonymous — Thu, 01 Aug 2013 09:24:11 GMT

Hi,

I'm a little out of my skill set here, but I found a response in the community which I think will help.

First you need to add the users to QMC. You do this in QMC --> System \ Setup \ Directoruy Service Connectors. Here you can e.g. add your AD, or make a custom list.

Adding a task is done in QMC --> Documents \ Source Documents. From here you choose the relevant document and 'Add task manually'. This makes a new window, from where you can navigate it Distribute \ Manually.

If you make your accespoint folder the same as sourcedoucments you will be able to make a task and thereby control who is able to see which documents.

Source documents are set in QMC --> System \ Setup \ Distribution services \ General

Documents available in Access Point are set in QMC --> System \ Setup \ QlikView servers \ Folders

I hope this helps. If not a search for DMS Security in the community should turn up some results for you.

Paul

Re: User Access to Apps

dmohanty — Thu, 01 Aug 2013 09:55:54 GMT

Thank you Paul for some help.

I have added my Users list to the Custom Directory. Now these users only can LogIn to the Access point and can see the documents.

But they are able to see all the documents and can access all. I need restriction on that. All users should not see all applications.

Regards!!!

Re: User Access to Apps

Anonymous — Thu, 01 Aug 2013 10:04:38 GMT

Hi,

We're getting there! I think you need to follow this bit next.

Our Qlkview server is down at the mo so I can't give you much of a steer on this at the mo. As soon as it's up I'll attempt to follow the instructions and see what's what.

Paul

Re: User Access to Apps

dmohanty — Thu, 01 Aug 2013 10:13:50 GMT

Ok Paul,

I have already created tasks in Source Documents, that are running on daily basis and being distributed to Access Point folder. Now I have 5 Apps that bein distributed to AP folder.

In Custom Directory, 20 users are being added. Now 20 users are able to log in to AP and access all 5 apps.

Now I need, LET first 5 users will access 2 apps and rest 15 will access 3 apps. Hope I am clear on this.

Regards!!!

Re: User Access to Apps

Miguel_Angel_Baeyens — Thu, 01 Aug 2013 10:40:30 GMT

Hi,

When using DMS what you have to do to avoid users seeing documents for other users is to have a field in the QVW with the users in the form DOMAIN\USERNAME, so the task can distribute and authorize to these users.

The task must be set in the QMC, Documents, Source Documents, and in the reload task, Distribute tab, Loop Field in Document, click on Open Document, select the field that stores the users in the DOMAIN\USERNAME form, and make it Check user Identity on "SAM Account Name".

As with DMS is QlikView and not the operating system who controls access to files, this is irrespective of licenses. If a user is authorized, he will be able to see the document and shold he has a license, to open the document. Otherwise, the user will not even be able to see the document.

Hope that helps.

Miguel

Re: User Access to Apps

dmohanty — Thu, 01 Aug 2013 10:49:31 GMT

Hi Miguel,

Thanks for throwing some light. Am able to get something now.

But wanted how and where to add the field with the users in the form DOMAIN\USERNAME? Is it something has to be done by INLINE statement?

Could you show a sample script?

Re: User Access to Apps

dmohanty — Thu, 01 Aug 2013 11:02:00 GMT

Hi Miguel,

I did like this in the Main page of one of the app in my Source Document Folder:

Users:

Load * INLINE

[

USERID

XYZ\AB12345

UVW\CD54321

];

And changed the settings in th QMC in the way you suggested.

Now suppose I log in to Access Point other than the above ID, should not I see the particular App?

Regards!!!

Re: User Access to Apps

Miguel_Angel_Baeyens — Thu, 01 Aug 2013 11:23:56 GMT

Hi,

Yes, that is correct. If you are not any of those users, you will not be able to see the document.

Note that those users are not USERID but NTNAME. You can find advanced section access script code examples in these posts (among many others):

http://community.qlik.com/thread/38492

http://community.qlik.com/thread/54877

http://community.qlik.com/thread/29086

http://community.qlik.com/thread/9890

Hope that helps.

Miguel

Re: User Access to Apps

dmohanty — Thu, 01 Aug 2013 11:32:16 GMT

Hi Miguel,

Thanks I will check those threads.

While using the "Loop Field in Document", shall we have to use the "Manually" section as well to distribute to Access Point folder?

I mean to ask both the tabs should be enabled or only 2nd one?

Re: User Access to Apps

Miguel_Angel_Baeyens — Thu, 01 Aug 2013 11:35:56 GMT

Hi,

It one or the other. If you use "Loop Field" you don't need to use the "Manually". You can specify a folder in a QlikView server or a folder in the filesystem to store the distributed documents.

Regards.

Miguel

Re: User Access to Apps

dmohanty — Mon, 05 Aug 2013 10:11:03 GMT

Thanks Miguel for the help.

Currently QDS is not functioning, because of this probably I am unable to get the desired solution as suggested above . I did exactly the same way as u mentioned, but the App is not getting distributed. Is it because of failed QVS, I am not getting the solution? I will try again once my QDS is available.

Infact I tried the follwing steps also and it worked perfectly:

· Go to User Documents

· Select any App you want to provide access

· Go to Authorization tab; select Named Users

· Click on Add Users and Groups

· Search for the NTNAME you want to give access(Domain\ UserID)

· Add the desired name to the RHS Box.

· Log in to the Access Point with the ID you have give access to the App.

· Now the particular app is visble in Access Point

· Log in to Access Point with the ID other than the Named User

· The particular App won’t be visible in the Access Point

Regards!!!

Re: User Access to Apps

juampe — Wed, 23 Aug 2017 12:02:51 GMT

Hello Miguel, I am a really fan of your post.

I am trying what you just said and I could´t get it. So to resume:

DMS configuration

In the QLikView app I have the following
- Strict Exlucsion
- Filter Access...

In the Script in the App I have the folllowing ( i donnt know if NTNAME is necesaary or if I use USERID is ok)

SECTION ACCESS;

LOAD * INLINE [

ACCESS, USERID, DIRECCION

USER, X339830,CENTRO DE SERVICIOS

USER, X533916,ADMINISTRACION

USER, X855123,*

USER, X855123,ADMININTRACION

];

Continue with the following instructions

So once I execute the task all my collegues have access to the application via Access Point and the configuration of the Loop Field in Document was deleted after reload or execute the task

Any Idea?

Re: User Access to Apps

Miguel_Angel_Baeyens — Thu, 24 Aug 2017 14:43:48 GMT

The attribute sAMAccountName requires the form of DIRECTORY\USER. You will need to use NTNAME field in Section Access instead, using this form.

Remember to add the service account to the section access so the QDS can open the document.

The purpose of USERID is to prompt the user to type a username, even if there is no PASSWORD.

This post is over 4 years old, there might be some changes affecting to this behavior as well.

Re: User Access to Apps

juampe — Mon, 28 Aug 2017 10:57:04 GMT

Working on that! You really help me to slove this.

I was trying to reload from INLINE Section Access Table and it works but it didnt work from qvd file.

I also read about to add a sentence "where 1=1" but still not working.

I think the problem is what you said about adding the service account.

Could you please let me know where is located this service account.

Sorry if is a dumb question but we are learning how to deal with QlikServer/publisher and we find it a little tricky.

Once again thanbk you so much with this.