How to sync users with new AD without affecting existing access

[Vinn_Qlik]

Hi All,

Please help with the below queries

Will all the users available in AD (Active Directory) be populated under users section in QMC if we create a AD and sync it in QMC.?

How does user authentication works in background ? I understand it is based on userid with domain name. Now, we are moving from one network to other and our AD will get changed , but in the new AD  the same users ( existing in old AD) will be available. How do I sync all the users with new AD without affecting the existing access on Qlik reports. 

Thanks,

Thanks

[Sonja_Bauernfeind]

Hello @Vinn_Qlik 

Users are added to the list of Users in the QMC when either:

• They have hit the Hub and their access attempt was recorded 
• The User Directory Connector has been configured to sync all users, not just existing ones.

Once they are visible in the Users section of the QMC, they can be assigned roles as well as licenses (though licenses can also be applied automatically using assignment rules). They can then also be used in Security Rules (for stream access, etc) based on groups and such or individually. 

See https://community.qlik.com/t5/Qlik-Support-Knowledge-Base/New-users-are-not-added-when-syncing-an-Us... for details.

Authentication though is not carried out with the User Directory Connector. The UDC allows you to manage users in terms of license and roles. Authentication is done in the step before, which out of the box with Qlik Sense is handled by Windows. 

You may want to give these a read as well, considering you are moving domains:

• https://community.qlik.com/t5/Qlik-Sense-Deployment-Management/Changing-Qlik-Sense-Server-Domain/m-p...
•  https://community.qlik.com/t5/Qlik-Support-Knowledge-Base/Qlik-Sense-moved-to-a-new-domain-or-server...