Qlik Sense: Security rules needed to call task start and result endpoints

[Sonja_Bauernfeind]

The resource filters needed to start a task and check its status using the /qrs/executionsession/ and /qrs/executionresult endpoints as seen under Task: Start are not all documented as seen under Available resource filters, which may make creating custom rules difficult. Using RootAdmin works, but this cannot be used in scenarios where only the least amount of permissions are needed.

Environment:

Qlik Sense Enterprise on Windows , all versions

Cause:

Undocumented resource was needed to call the endpoints.

Resolution:

These steps will create a rule capable of running the endpoints listed under Task: Start with the minimum of rights needed.

1. Create a new security rule called TaskAdmin.

2. For the Resource filter, add: App_*, ReloadTask_*, ExecutionResult_*, ExecutionSession_*

3. For Actions, check: Read and Update.

4. For Conditions, put: ((user.roles="TaskAdmin"))

5. Save the rule.

[polyakov]

For the new type of task - external task need add to 2nd steps resource filter externalProgramTask_*