In QlikView you can create AD groups for each unit (stream) and than give app access to that AD group. Is that what is done behind the scenes in the stream solution?
No access to a stream is based on a condition that is part of a security rule.
So yes you can set it up to have a one to one relation so that having access to a stream is equal to be part of an AD group but it does not have to be that way.
The rules gives you the possibility though the condition to do logic on groups for example Country=Sweden and Group=Sales and that would only grant access to sales people in Sweden without having to create a new group.
No access to a stream is based on a condition that is part of a security rule.
So yes you can set it up to have a one to one relation so that having access to a stream is equal to be part of an AD group but it does not have to be that way.
The rules gives you the possibility though the condition to do logic on groups for example Country=Sweden and Group=Sales and that would only grant access to sales people in Sweden without having to create a new group.
