topic Re: Section Access Question in QlikView

Section Access Question

raju_salmon — Mon, 07 Dec 2015 09:57:10 GMT

Hi All,

I am implementing section access with best practices, i need to use NT NAME (user doesnot want to specifically login with SSO) for my section access.

Is it OK if i use ACCESS, NTNAME (DomainName\windowsLogin),REGION field?

or I need to use ACCESS, NTNAME (DomainName\windowsLogin),NTDOMAINSID, REGION field.

May i know the extra benefits by using NTDOMAINSID?

Here is my sample excel file.

ACCESS	NTNAME	NTDOMAINSID	REGION
ADMIN	ACCESS.COM\UserLoginA	A-X-5-18-353281543-3603327983-2995495364	AJP
USER	ACCESS.COM\UserLoginB	A-X-5-18-353281543-3603327983-2995495364	USA
USER	ACCESS.COM\UserLoginC	A-X-5-18-353281543-3603327983-2995495364	NORTH

Re: Section Access Question

avinashelite — Mon, 07 Dec 2015 10:04:33 GMT

Hi Raju,

1.Yes ACCESS and NTNAME is enough to build a section access .

2.If you want to reduce data then you can include the third field like REGION

NTDOMAINSID

This field must contain a string corresponding to a Windows NT Domain SID.

Example: S-1-5-21-125976590-467238106-1092489882

QlikView will fetch the logon information from the OS and compare it to the value in

this field.

The NTDOMAINSID can be derived from the script, “Edit”->”Insert Domain SID”

Please check the attachment

Re: Section Access Question

jonathandienst — Mon, 07 Dec 2015 10:07:30 GMT

The domain SID will prevent the document from being opened outside the domain. For example, a qvw sent by email (perhaps illicitly) will not be able to be opened by the recipient on their local machine/domain.

Re: Section Access Question

nagarjuna_kotha — Mon, 07 Dec 2015 10:08:43 GMT

Hi Raju,

Only USERNAME and NTNAME is enough to provide SA to your application.

-Nagarjun

Re: Section Access Question

raju_salmon — Mon, 07 Dec 2015 10:27:25 GMT

USER NAME and NTNAME comes under NTNAME... am i right??

Like ACCESS.COM\UserLoginA

DomainName\Username