topic section access with AD groups in QlikView

section access with AD groups

singhcv123 — Mon, 07 Nov 2016 10:35:01 GMT

Hi ,

i am recently working in section access with AD group .

but as per my scenario we need to add 5 user and these user can see 1 sheet ...other user can not.

but other users are more than 500.

is there any way that (not equal to ) works in section access script.

Section Access;

Security:

LOAD * INLINE [

ACCESS, UPPER(NTNAME) AS NTNAME,UPPER(USERNAME) AS USERNAME

ADMIN, amazon\AWS PROD Qlikview Power Users,amazon\AWS PROD Qlikview Power Users

USER, amazon\AWS UAT Qlikview Power Users,amazon\AWS UAT Qlikview Power Users

];

Section Application;

SheetAccess:

LOAD * INLINE [

USERNAME, SHEET1FLAG, SHEET2FLAG

amazon\AWS PROD Qlikview Power Users, 0,0

amzon\AWS UAT Qlikview Power Users, 0,1

];

as per below script i don't wat that other than amzon\AWS UAT Qlikview Power Users can not see this sheet hence they can view other sheets in documents.

ouer group "AWS UAT Qlikview Power Users" having those 5 user but other users are in different -2 groups that we cannot mention here in script .

please suggest is there any mechanism that we can manage the sheet access for 5 users and other user can only see other sheets not this one.....please suggest the code logic.

Re: section access with AD groups

its_anandrjs — Mon, 07 Nov 2016 10:43:50 GMT

Try this ways

Section Access;

Security:

Load ACCESS, UPPER(NTNAME) AS NTNAME, UPPER(USERNAME) AS USERNAME;

LOAD * INLINE

[

ACCESS, NTNAME, USERNAME

ADMIN, amazon\AWS PROD Qlikview Power Users,amazon\AWS PROD Qlikview Power Users

USER, amazon\AWS UAT Qlikview Power Users,amazon\AWS UAT Qlikview Power Users

];

Section Application;

SheetAccess:

LOAD * INLINE [

USERNAME, SHEET1FLAG, SHEET2FLAG

amazon\AWS PROD Qlikview Power Users, 0,0

amzon\AWS UAT Qlikview Power Users, 0,1

];

Regards

Anand

Re: section access with AD groups

singhcv123 — Mon, 07 Nov 2016 11:08:21 GMT

no this will not help........i want other than 1 group can not access particular sheet.but they can access other sheet.

other than 1 group there are more than 500 user......that's why i am looking for someting like <> in section access

Re: section access with AD groups

marcus_sommer — Mon, 07 Nov 2016 11:37:43 GMT

AFAIK that's not possible with ad groups. Are the user member of a ad group which aren't allowed to access this sheet you couldn't give them access in any way - one access denial meant it's always denied regardless if there are further authorizations.

This meant you need to use single user instead of user groups (this mustn't be done manually - there are ways to read an ad) or more practically by 5 users: you used a visibility-condition for this sheet like:

if(match(osuser(), 'user1', 'user2', ...), true(), false())

- Marcus

Re: section access with AD groups

its_anandrjs — Mon, 07 Nov 2016 12:56:26 GMT

I agree with the Marcus which is difficult as well as you can do another way by creating a group in the script by assuming they are this group and add the users which are belongs to this groups after this use section access for this group to restrict this users by section access.

Regards

Anand