Someone created the below rule to allow ADGroup to access an app, and I don't know what it's supposed to do. So I have 3 questions and hope someone here can help.
1) ABC group has 10 users, does qlik automatically reserve 10 login passes even though no one has used it yet?
2) DFG group has 15 users of which 5 exists in ABC, if Q1 holds true where qlik reserves 10 login passes, will qlik also hold 15 regardless what exists in ABC?
3) 1 login pass has a predefined time of 60 minutes. Let's say Jack login today and used up 10 minutes and closed out the browser. A week later, he logged back in and used another 10 minutes, in this scenario, is Jack using only 1 login pass since he logged in twice and technically used 20 minutes out of the 60? Does this mean 1 login pass = 60 minutes and for duration of 28 days?
(((user.group=resource.@ADGroupLoginAccess and resource.stream.name like "*") or (user.group=resource.app.@ADGroupLoginAccess and (resource.approved="true" or (resource.owner.userId=user.userId and resource.approved="false" ) or resource.published="true" )))
