Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi,
I was asked if it is possible to deny the access to a single app without using section access?
The user should see the stream, but should not see a particular app inside the stream?
Thanks in advance
1) Create a Custom Property >> choose resources APP and USER >> Add Value "the App name"
2) in QMC under APPs>> double click the concerned App >> add value "the App name"
3) in QMC under USERS >> double click conerned USER >> add value "the App name"
4) create security rule as
app.@custompropertyname like user.@custompropertyname
this way only users that have custom property value that is same as the app custom property value can see the app
Thanks,
i did that to my own user, but i can still see the app
Hi @JPanzer
This can be achieved with Security Rules, however you will need to consider the following
1. Qlik Sense has default security rules that grant access to users.
2. You will need probably to look into those rules and modify them. It is suggested to disable "default" rules and create a copy of the rule and create a custom one, this will allow you to always have a copy of the default rule.
3. You can manage resources access, our documentation is here:
4. When setting up Security rules you can Audit access, for example for the user you are attempting to change privileges, you can go to Audit section and verify the access to that particular app, a grid shows up, if you double click in each of the squares it will show a window with the rules that are granting the access, for example you can check the "R" read access and you will see what security rules are granting the access. then you can create a custom rule that excludes the app.
Audit Rules Video
https://www.youtube.com/watch?v=QDj3rIuzqoY
There are some general Security Rules samples here:
Hope it helps!
I don't know if Sense provides the identically section access features like QlikView which allowed to restrict the visibility of applications within the access point without the need of applying any data-reduction. If it's also available in Sense it may be a more practicably way as defining security rules.