Limiting access to Stream and App on nodes (with different addresses DNS)

[KeyReaL]

Good day, colleagues, tell me how to solve my problem, I still can’t find a suitable article.

We have two servers with Qlik Sense Enterprise (May 2021): Central (with DNS address https: // server1) and RIM (with DNS address https: // server2). The second (RIM) was raised to unload the load of the central server.

Now, at the entrance to the second server, you can open all the applications and streams that are on the central node, but how can you limit them if you enter from different DNS addresses?

For example:

There are streams on the central server: accounting, personnel department, technical department.

At the entrance to https: // server1 (which is registered on the central node as alias)- we go to the central server and see not everything, but only streams: accounting, personnel department A

At the entrance to https: // server2 (which is registered on the second node like alias) - we go to the second node (RIM server), but we will see only a stream: technical department.

Thanks for any hint.

Regards, Kirill

[Albert_Candelario]

Hello @KeyReaL ,

Thanks for posting.

Have you think of limiting the stream per node on the security rules
(node.iscentral="false")

And edit the above as per your requirements.

Or using some customer properties to link nodes to streams. I haven't had the chance to test it, but could be something to explore.

This also might help to inspire you:

Security Rule Example: Basic rule setup for Apps a... - Qlik Community - 1717278

Cheers,

Albert

[KeyReaL]

Hello, @Albert_Candelario,

Thanks for the hint.

We already have a configured limitation on streams, on applications and sheets, taking into account the created groups of Departament in "Customer Properties".

Used this article:  https://community.qlik.com/t5/Qlik-Sense-Documents/Sheet-or-App-Object-Level-Security-Qlik-Sense/ta-...

I will try to prescribe Node binding to the rules.

Regards, Kirill.

[Albert_Candelario]

Great @KeyReaL , let's us know how it goes.

Cheers,

Albert

[KeyReaL]

Good day @Albert_Candelario 

The problem has not been solved, according to your recommendation, made the following:

1. For testing created two users: "usertest1" and "usertest2"

2. I made up the "Customer Properties" parameter "Test1"

3. assigned this parameter to my users

4. In the stream to the rule, I wrote: ((user.@Group = "Test1") and (node.iscentral = "false"))

Result: my stream disappeared when connecting to "Central" and "RIM" server

I tried to use the parameter: ((user.@Group = "test1") and (node.name = "App-qlik-01"))

*The name RIM server-"App-qlik-01"

Found an article: https://community.qlik.com/t5/knowledge/load-balanking-rules-only-specific-stream-pps-to-be/ta-p/171...

I study it.

If I find a solution, I will write

Regards, Kirill

[Albert_Candelario]

Thanks @KeyReaL  for your prompt replies, if can think of something else or find something relevant I would share too.

Kindly, keep us posted.

Cheers,

Albert