Greetings. In our Qlik cloud environment, we're pulling users' gsuite accounts via IDP and connecting them to the Qlik environment using those accounts. Users are present in the system along with their email addresses. Our goal is this: instead of pulling individual email accounts, we're pulling the email groups that users belong to, assigning permissions to those groups, and then extending those permissions to everyone in that group. Is this feasible? In our IDP environment, we're using OIDC as the generic type and provider. Perhaps there's another way. The main point is that we want to grant permissions to users based on the email groups their email addresses belong to, not just their individual email addresses.
In our Qlik Cloud environment, we currently pull users’ G Suite accounts via our IDP and connect them to Qlik using their individual accounts, with users visible in the system along with their email addresses. Our goal is to shift from managing permissions at the individual level to managing them at the group level. Specifically, we want to pull the email groups that users belong to, assign permissions to those groups, and automatically extend those permissions to all members within the group. While we are currently using OIDC as a generic type and provider in our IDP setup, we are exploring whether there is a way to leverage group-based access so that permissions are granted based on group membership rather than individual email accounts. This approach would streamline access management and ensure that user permissions are consistently aligned with their organizational groupings. E-ZPass Massachusetts
