Can Rootadmin Be Assigned to an AD Group

[richnwide]

Hello,

Our IT security people have asked that all root admin privileges be onboarded to an AD group so that super-user access can be governed though AD. 

Is that something which we can do? I thought all admin privileges are granted on a user basis

Thanks

R

[Eduardo_Monteiro]

Hi @richnwide 

There is no native mechanism to assign admin default roles directly to an AD group through the QMC; these are assigned per-user only.

What you can do alternatively is to create a custom security rule granting access to users of a specific group. 

Let's say the users you are looking to have RootAdmin are part of QlikSenseRootAdmins group:

• Create a custom security rule targeting user.group="QlikSenseRootAdmins" with resource filter * and all actions, context Only in QMC.
• Create a QMC section access rule granting the group access to all QMC sections (resource filter QmcSection_*, condition user.group="QlikSenseRootAdmins").

I hope that helps!

[richnwide]

Thank Eduardo. We'll give that a go and mark it as a solution if it works