topic Re: Section Access Deployment in QlikView

Section Access Deployment

Tue, 10 Dec 2013 16:39:59 GMT

We have been working on our first dashboard with section access in it. We have it up and running on our local computers, once we try to run it though the management council the job fails.

The dashboard runs to completion without the section access in it. (Strangely enough we have to completely DELETE section access from the load script to get it to run, if it is commented out the job fails!)

We tried editing the job and checking the section access box in the Reload tab. This allows the job to run however we are denied access when we try to open it in access point.

Does anyone have any ideas or documentation on deploying section access? I have the 'Introduction to Section Access' document, however that does not discuss deploying it through the management council

Re: Section Access Deployment

Bill_Britt — Tue, 10 Dec 2013 17:02:36 GMT

Hi,

The main thing is the Service Account needs to be added to Section Access and setup so that it can see all data.

Bill

Re: Section Access Deployment

Tue, 10 Dec 2013 21:08:55 GMT

Thanks Bill,

When you say that I need to include the Service Account in the Section Access do you mean in the inline statement? Is there anything special we need to do in the Management Council to show that the job has section access?

Re: Section Access Deployment

Thu, 12 Dec 2013 19:28:25 GMT

I created a simple QVW with only 3 fields and applied section access to it. Works great (on my desktop).

I tried loading it onto our test server and the job fails.

I tried checking the box on the Reload tab, Data Protection, Section Access... the job fails

I included my username and password in the same section mentioned above.... the job runs but ONLY I can get into the document

I have read documentation that said that the QlikView service account needs to be listed? Does that go into my load script or in the management council? If its the management council, where does it belong?

Any help would be great, we have been struggling with this for days!

THANK YOU!!!

Re: Section Access Deployment

mphekin12 — Thu, 12 Dec 2013 19:50:54 GMT

Kaitlyn,

The service account has to be listed in your load script under the NTName with the following format: domain\serviceaccount.

You also have to set the service account in the QEMC. Go to System and Setup, and select the service under the Distribution Services folder. On the right side, click on the Advanced tab and enter the service accounts user name and password under the Section Access area.

I hope this helps. I was struggling with this for days as well and this seemed to work for me.

Also, try to avoid using ALL and use * instead.

Re: Section Access Deployment

Thu, 12 Dec 2013 20:24:07 GMT

MPHEKIN12,

Thank you so much, I feel like I am getting closer. I added the service in the location you mentioned above and I am now able to sign in as two of the people listed however our ADMIN account does not work. This is the script I am using in the QVW.... Any ideas?

Section Access;
LOAD * INLINE [
    ACCESS, USERID, PASSWORD, DEPARTMENT
    ADMIN, ADMIN, ADMIN,
    ADMIN, qlikview-service-name, PASSWORD,
    USER, M09849, M09849, BI
    USER, M01122, M01122, IT
];
Section Application;
LOAD * INLINE [
USERID, DEPARTMENT
    M09849, BI
    M01122, IT
];

Re: Section Access Deployment

Bill_Britt — Thu, 12 Dec 2013 20:27:49 GMT

HI,

Try this

Section Access;
LOAD * INLINE [
    ACCESS, USERID, PASSWORD, DEPARTMENT
    ADMIN, ADMIN, ADMIN,*
    ADMIN, qlikview-service-name, PASSWORD,
    USER, M09849, M09849, BI
    USER, M01122, M01122, IT
];
Section Application;
LOAD * INLINE [
USERID, DEPARTMENT
    M09849, BI
    M01122, IT
];

Re: Section Access Deployment

Thu, 12 Dec 2013 20:29:47 GMT

Wouldn't the star limit the ADMIN view to only the two departments listed there?

Re: Section Access Deployment

Thu, 12 Dec 2013 20:43:09 GMT

I just tried it with 'ALL'. Works great on my desktop, when I run it through the council only the two USERS can log in

Re: Section Access Deployment

mphekin12 — Thu, 12 Dec 2013 21:14:56 GMT

Kaitlyn,

I haven't had much success using ALL through AccessPoint either. ALL works fine when I log into a dashboard on the QV Server though.

You might have to list out each department in the section access file before using the * in your ADMIN record.

Re: Section Access Deployment

Bill_Britt — Thu, 12 Dec 2013 22:42:26 GMT

OK, lets look at something like this

Access;

LOAD * INLINE [
    ACCESS, USERID, GROUP
    ADMIN, ADMIN, AGRP
    ADMIN, BOB, CGRP
    ADMIN, TEST, BGRP
    ADMIN, MSS, BGRP

];

Section Application;
star is *;

LOAD * INLINE [
    GROUP, Country
    AGRP, *
    BGRP, USA
    CGRP, Canada
    CGRP, France
   ];

Bill