Section access allow an AD group full access

[sebHan]

Hey! I'm currently working on allowing an AD group full viewing access in one of my apps.

Currently my app is filtering the data based on a dimension called BU which is both present in the data and in an internal databse which qlik connects to and identify the employees BU when entering the app.

However, I would like to have that an AD groups is "excluded" from the script and thus have full access.

To elaborate on my script, it is currently working like the following:

Section 1) Connect Qlik to an internal database, where BU and EMPLOYEEGUID is loaded whenever an account log-in:

[CustomerTable]:
LOAD BU,
EMPLOYEEGUID;
SQL SELECT
BU,
EMPLOYEEGUID
FROM
"Maconomy_comp_Kunder".dbo."T_Maconomy_Employees"
WHERE
LEN(EMPLOYEEGUID) >0 AND LEN(BU) > 0;

Section 2) Matches the loaded BU with the BU from the data and make section access based upon this:

Section Access;

[SectionAccessTable]:
NoConcatenate
LOAD
'USER' as ACCESS,
'GLB\' & UPPER(EMPLOYEEGUID) AS USERID,
BU as HistoriskBU
Resident CustomerTable;

Temp_HistoriskBU:
NoConcatenate
LOAD DISTINCT
HistoriskBU
RESIDENT [Jobdata];

Concatenate([SectionAccessTable])
LOAD
'INTERNAL\SA_SCHEDULER' AS USERID,
'ADMIN' AS ACCESS,
HistoriskBU
RESIDENT Temp_HistoriskBU;

DROP TABLE Temp_HistoriskBU;

Section Application;

Can anybody help here?

[Adam_R · Accepted solution]

Hi Sebhan,

In Qlik Sense Enterprise, restricting data or data load within an app is not supported. Either an user has access to a Stream or an App, or they don't. There's no way to micro filter what data the users see. Also, we don't recommend using Section Access.

Restricting access to QMC streams in qliksense - Qlik Community - 1244557