How to segregate access for APPs.

[khanashique]

Hi Experts,

I have an APP published in one Stream, and the same stream has other different Apps. I need to know how can i segregate access for APPs for two different users.

Example:

Stream              Apps

Sales               Daily Sales

                        Monthly Sales

                        Revenue

In the above example, Revenue has to be shared with 2 different users.

Thanks,

MAK.

[jerifortune]

Hi Khan,

You can set up a security rule on QMC that would restrict access to apps. You assign read access of the app  to users whom you want to grant access to the app.  You can read about Security Rule https://help.qlik.com/en-US/sense/February2018/Subsystems/ManagementConsole/Content/preinstalled-QMC...

Hope this would assist you

[khanashique]

Hi Jerry,

Thanks for your quick reply,  i have gone through the link but i got lost...

Can you please share any simple example so that i can try the same...

Thanks,

MAK.

[jerifortune]

I don't have access to Security Rule interface to give you the exact window, however, the following steps should guide you.

Step one: Custom Property

1. Go to custom property and create new custom property with Name of your choice eg AppUserGroup

2. Check the USER box

3. Under VALUES enter NonRevenue - You can add multiple revenues but for now one could be fine.

4. Create button

Step two: Security Rule

1. Go to Security rule and create a security rule to restrict users access to Revenue App

2. Under Name, you may give it Revenue App Restriction

3. Under Resources Filter : Select App

4. under Action, check Read or other actions as applicable

5. Under condition, make sure this conditions are applied

     a. App is equal to 'Revenue' (the name of the app you want to restrict)

     b.  @AppUserGroup is not equal to 'NonRevenue'

6. Set Context to both QMC and Hub

Step Three: Assigning users to group

1. Select user that you don't want to have access to Revenue App

2. Under custom Property, select NonRevenue as AppUserGroup

Hope this could be of help.

Thanks

[khanashique]

Hi Jerry,

The above steps which you have provided are very helpful, and i was able to follow all the steps but still its same, it seems like the security rules are not working...

below is the condition i have applied:

((resource.name="Revenue" and resource.owner.@Test_Apps!="Sales"))

Thanks,

MAK.

[jerifortune]

user.@Test_Apps!="Sales" 

I assumed you followed the steps above although the naming is not the same

[khanashique]

Hi,

I have tried that too earlier, but result is same...

Thanks,

MAK.

[jerifortune]

It is difficult for me to guide you without having access to the QMC. I can't say what is exactly broken. But perform  this check.

1. Is Test_App a custom property for Apps or Users?

2. Did the App name popped  up or you typed it? It should pop up
3. You may include app object under resources filter like this:
     Resources Filter: App_*, App.Object_*

4. You can do this test under the condition:
    Resource.Name!="<Name of your app>" AND User.name ="<Select your Name here>"

Check if you have access to the app

[khanashique]

Hi Jerry,

1. Is Test_App a custom property for Apps or Users?  - Its Custom Property Name

2. Did the App name popped  up or you typed it? It should pop up - I think i have typed

---------------------------------------------------------------------------------------------------------------------------------

Hard luck, even tried below no result...

3. You may include app object under resources filter like this:
    Resources Filter: App_*, App.Object_*

4. You can do this test under the condition:
    Resource.Name!="<Name of your app>" AND User.name ="<Select your Name here>"

Thanks,

MAK.

[khanashique]

I am still waiting for experts to assist me in achieving / solving this questions...