Limit to analyzer access license

[darpao]

I would like to give a user an analyzer access but I don't want to give it access to data panel.

So he should be able to create bookmarks, print objects, stories, and sheets, and export data from an object to Excel but he can not modify the preset query that load data.

Or at the same time to have a analizer capacity access but with the possibility to create sheets and so on.

Is it possible? The system engineer said me not, there are only 2 types of users: the one that can do everything and the one that can only show reports made by other.

How can I achieve it if yes?

[lironbaram]

hi

analyzer license 

allows user to do exactly what you want, he can create bookmark , export data , stories ,

he can't create private sheets inside the published app, or create new apps

as for changing the load script of an app, nobody can change the load script of a published app, not even the administrator 

[anderseriksson]

"as for changing the load script of an app, nobody can change the load script of a published app, not even the administrator"

That is not quite true. Like everything else that is controlled by security rules.
I recently had a customer server where someone had played around with the security
rules allowing Root Admins to edit the load script directly in the published apps!
One of the first things I put an end to.

[darpao]

Ok, 

but we don't want the user can change the query also before he publish it.

We don't want a not expert user can create to heavy queries that lock the tables of production database.

[AdamBSnotused]

If you are running Qlik Sense Enterprise you have a lot of flexibility via the security rules.

We normally implement:

Analyzer license for the story teller user - creates bookmarks/stories

Professional license with governance to achieve what I believe you are asking for:

* Some can contribute / personalise an App but they can't create new Apps

* Some can do all

Good luck with the design. 

[anderseriksson]

With standard security rules a user with Analyzer Licens can't do any development at all.
He can't edit script and he can't publish.
Analyzer License is for end users not developers and therein lies the price difference.
If Analyzer License could do everything a Professional License can why then pay for Professionals?

[darpao]

Yes we use Qlik Sense Enterprise, I don't want that he edit the script, but can he create new sheets in the app?

I don't need he can create new apps, only sheets. 

Can someone give me a manual reference on how I can manage the roles?

I'm a professional user licenced but and I don't have access to the management console. And who has it say that it is not possible to do this. 

[anderseriksson]

Creating new Sheets and publish them is a developer task and he needs a Professional License for that.
You can't develop with an Analyzer License.
If he will be allowed only to develop UI and blocked from developing scripts he needs Professional License and some tinkering with security rules to remove him from the rules that allow access to script editing.
There are no deny rules in Sense only allow rules thus this is somewhat involved to get it right.
Don't know of any manuals that tell you how to set it up.

[AdamBSnotused]

Sorry for the late reply.  What you want to achieve - a Professional User who can only create sheets - is possible.  It is already implemented in QSE SaaS.

For QSE client managed you need to:

1. Have user attributes that indicate which Professional User to restrict

2. Have the security rules adjusted to apply the restrictions

The person who does this must have access to the QMC.  It is hard to do via chat - a consulting engagement is usually needed in the cases I have seen.  Do you have Qlik service providers?

https://community.qlik.com/t5/Qlik-Sense-Documents-Videos/iPortal/ta-p/1487372 iPortal is not a solution, it is a tool to help build the type of solution you want and the Qlik Enterprise team created this and some security rules to guide us.  So you can learn on your own if you prefer.  All the best, Adam

[anderseriksson]

A user with Analyzer License can create sheets using master items.
Those sheets can then be shared with other users as community sheets.
A developer can then copy the community sheet (some manual work) and
include it with the published sheets if you want it to belong to the core of the application.

Is this what you want?
It is not if you have Qlik Sense Enterprise that is the limiting factor, it is the type of user licenses you have.