Export Data Permissions

[rdm6532]

Hello there, 

We have Qlik Cloud applications in which certain users have the ability to export data, either by using a third party extension or via the native 'export' function found as the top right of a visualization, and some users that do not. The users that cannot export cannot see the button to export data and clicking upon the third party extension gives them a 401 error.

For all intents and purposes, users that can have the exact same permissions as those that cannot. For reference, we do use an IdP to authenticate users from both within and outside of our organization. But the delineation in valid access does not seem connected to either an organization nor space. 

Any help or ideas for troubleshooting are very much appreciated,

[rubenmarin]

Hi, is this for Qlik cloud or OnPremise version?

In cloud to prevent the users to export data you need to create a dedicated role that limits the action, in the administer users section you can checjk if they have the role.

In OnPremise is managed by security rules, using the audit section you can select a user that has permission to export, and check wich rules gives that permission.

[rdm6532]

@rubenmarin thank you for your reply.

This is in Qlik Cloud.

 All the users have the "Embedded Analytics User" permission and they have the "Can View" permission within each space in which the applications reside. But some of the users can export and some cannot.

[rubenmarin · Accepted solution]

Hi, that role is used for users that only access Qlik in integrated modules. the users that can export have any other permission?

Also check on "Manage Users" -> Permissions -> 'User Default' button -> Content types -> Applications -> Content Download -> It is allowed?

[rdm6532]

Ruben,

Good thought, but that permission is indeed allowed:

[rubenmarin]

Ok, my last shot would be in case the embedded anaytics role has something to do, that role is supposed to use only with users that uses Qlik integrated on other apps, I think of 2 options here:

- The unathorized error is created with something of the integrated app

- The user don't uses Qlik in any integrated app and this role is unnecesary, in that case I would try to uncheck it and check if it works without the role.

Besides this, the option is to use the developer options of the browser, or check the Qlik Sense logs trying to get any hint of what causes the error.

[rdm6532]

Ruben, 

Thank you again for your help. It seems that some users simply do not have the download pop up box that typically appears at the top right (perhaps because of their browser), but by right clicking on the table, they still have the permission to download.