topic Re: Section Access with AD-Group? in QlikView

Section Access with AD-Group?

Sahal — Wed, 25 Nov 2020 16:16:04 GMT

Hi,

I tried to search an answer on how to use AD-Groups in section access instead of samaccountname.

There was not so many good answers unfortunately.

NTNAME FIELDVALUE ACCESS

DOMAIN\ADGROUP 001 ADMIN

DOMAIN\SAMACCOUNTNAME 006 USER

Is it possible to use both adgroup and samaccountname in NTMANE field or is NTNAME field only locked to samaccountname?

And should i use DOMAIN\.... or not?

Re: Section Access with AD-Group?

rsplanes — Sun, 30 Oct 2016 22:07:30 GMT

Hello Hassan,

you can use DOMAIN\GROUP and DOMAIN\USER in NTNAME field

both can apply for one user

yes, you should use 'DOMAIN\' and always with upper case letters

Regards,

Re: Section Access with AD-Group?

chiragparikh01 — Wed, 05 Jun 2019 09:50:14 GMT

Hi Hassan,

Is it possible to use multiple domain groups in section access? i.e. DOMAIN1\GROUP1, DOMAIN2\GROUP2 etc.

I am getting an error Access denied.

Regards,

Chirag Parikh

Re: Section Access with AD-Group?

Brett_Bleess — Tue, 09 Jul 2019 15:31:01 GMT

Chirag, just FYI, it is best if you create a new thread in these situations versus posting to an old thread, but the answer is yes, but you will need to ensure the domains have the proper trust relationships configured between them such that the server is able to process auth requests against both domains etc., or things are not likely going to work. The exception for this would be if you are using a custom single sign-on front-end for authentication, and the QlikView Server is set to use the DMS security mode, in that case you would just need to have both domains configured as AD DSP's in the Directory Resource Connector area of the QMC I believe, such that we would be able to check if the user exists etc. Hopefully this helps, if not, do post to a new thread, that should get you an answer more quickly.

Regards,
Brett