topic Re: Security choices in QlikView

Security choices

Wed, 25 Nov 2020 16:16:04 GMT

Hi,

I need an advise on what approach to take to apply Level 2 security to a dashboard.

Level 1 who can see the dashboard is based on groups in AD.

Ones you are in data should be filtered based on AD info what schools you have access to.

User types are :

-School principle (should see one school)

-superintendent1(should see several schools A,B,C)

-superintendent2(should see several schools D,E,F)

-superintendant3(should see all schools)

-admin(can see all schools)

Thanks,

Re: Security choices

jpapador — Wed, 01 Jun 2016 19:59:02 GMT

You'll want to use a feature called Section Application. It essentially allows you to build a two column table and link it to a field to reduce what data a user can see. Column 1 would be NTNAME, column 2 would be SCHOOL. You can find help on the syntax by searching section application in the help section of qlikview or here on the community.

You would link that to the school field in your data model.

NTNAME, SCHOOL

[Principal name], A

[superintendent user 1], A

[superintendent user 1], B

[superintendent user 1], C

[superintendent user 2], D

[superintendent user 2], E

[superintendent user 2], F

etc

Re: Security choices

Peter_Cammaert — Wed, 01 Jun 2016 20:07:28 GMT

You mean "Section Access"?

Re: Security choices

Wed, 01 Jun 2016 20:13:03 GMT

username,password,School

Admin,123,*

principle,123,A

[superintendent user 1], 123,A

[superintendent user 1], 123,B

[superintendent user 1],123, C

[superintendent user 2], 123,D

[superintendent user 2],123,E

[superintendent user 2], 123,F

etc

Re: Security choices

Thu, 02 Jun 2016 12:31:54 GMT

thank you all

to use Section Access do I create user/school QVD based on AD info?

Can I use publisher so I filter data before dashboard loads per user, is it an option?

The dashboard is relatively big already and it will continue to grow every year. Performance could be an issue.

Thanks,

Re: Security choices

Colin-Albert — Thu, 02 Jun 2016 12:34:50 GMT

There is a comprehensive list of resources about Section Access here which should answer your question.

The list has been compiled by marcus_sommer

Section Access

Re: Security choices

Colin-Albert — Thu, 02 Jun 2016 12:36:59 GMT

If you have publisher, you can use Loop & Reduce to split your one large app into several smaller apps each containing data for one school or a group of schools.

You can use file / folder permissions and/or Section Access to control who can access this data.

Re: Security choices

Thu, 02 Jun 2016 12:55:00 GMT

thanks,

I was wondering if splitting into apps per school is a good idea. there are 266 schools

Re: Security choices

Colin-Albert — Thu, 02 Jun 2016 13:00:38 GMT

If you use Section Access with Data Reduction and Strict Exclusion, data from schools the user does not have permission to view will be removed from the app they open anyhow.

Do your users just need to see data from one school or from a region or group of schools?

Have a look at the links on Section Access I posted earlier, there are several items on data reduction.

Re: Security choices

Thu, 02 Jun 2016 13:36:14 GMT

principles see one school only (266 schools), superintendents see different groups (up to 30 groups)