Qlik Community

Deployment & Management

Discussion board where members learn more about Qlik Sense Installation, Deployment and Management.

Announcements
Now Live: Qlik Sense SaaS Simplified Authoring – Analytics Creation for Everyone: READ DETAILS
cancel
Showing results for 
Search instead for 
Did you mean: 
thomaslg_wq
Creator III
Creator III

Faster app level security rule ?

Hi everyone,

I would like to know your ideas on how to create an app level security with the fastest security rule evaluation.

Some points about the environment : 

  • OEM client with :
    • >100 end customers (groups of around 5 to 20 users)
    • >100 streams : most of them specific for some customers, a few that can be shared across customers
    • >1000 apps
    • >1000 users 

 

  • If we were doing some app level security with custom properties, we would have >1000 custom properties values
    • by user
    • or
    • by app
      which is totally out of the Qlik recommmandations

  • Is there another way ?
  • Are >1000 Active Directory Groups faster to evaluate than >1000 custom properties values ?

 

In general, how do you deal with large volume of users/apps and still have a good performance of rules evaluation ?

  • I may have an idea of how I am going to implement this but I want your fresh ideas first 🙂

 

Thanks for your ideas !

Regards,

Thomas

4 Replies
e_petrasevicius21
Partner - Contributor III
Partner - Contributor III

Hi, @thomaslg_wq ,

Same issue on our side - we tried both (Groups and CP) 

From general Groups are evaluated faster - but we ran into second bottleneck - too many Active Directory attributes are import as User attribute. In some cases user has around 900 attributes which only 20 of them are related with Qlik security - however during Log in all of the groups are checked against security rules and we lose performance in HUB opening (around 40s in such cases).

Maybe you found a way to workaround this? Or you have better results with CP evaluation?

thomaslg_wq
Creator III
Creator III
Author

Hi Edgaras,

Thanks for your input. 

It has not been implemented yet, we are currently redesigning our whole Qlik platform, this question remains one of our main concerns. 

How much faster would you say the groups are evaluated (how much % of improvement did you see with groups in app opening for instance ?)

I hear you on the second bottleneck... It seems there is no perfect way to do it..

I was hoping to find some good workarounds but my post did not drag much reponse, I guess we'll have to test various workarounds ourselves 🙂

Thanks again,

gandalfgray
Specialist II
Specialist II

Hi guys! How did this go for you?

We are working on a similar project, so it would be interesting to hear about your findings 🙂

Maria_Halley
Support
Support

@gandalfgray

@thomaslg_wq

 

There is some information in the Help about this subject.

 

So that's a good place to start.

https://help.qlik.com/en-US/sense-admin/November2021/Subsystems/DeployAdministerQSE/Content/Sense_De...