QlikSense ODAG link creation catches Access Denied

[patekro]

A user (developer) is trying to create an ODAG link in production environment and gets Access Denied error code 5. The user owns selection and template applications.  RootAdmin is able to create links for the same. Which access privileges are missing from the user?  

For the same apps in the development environment the user is able to create links.

[mpc]

Hi, 

Check this: On-Demand App Generation (ODAG): App Reload Load B... - Qlik Community - 1717759

Your production node must be in both or development role, can you check this ? 
According to this Security Rules doc: Security rules included in Qlik Sense | Qlik Sense for administrators Help User need to access to template and selection apps, can you check this too ? 

Best

regards

[patekro]

Thanks for you response. I've checked all points - no help.

We've got that working by creating a security rule with the resource filter as '*' all and Create-Update-ChangeOwner privileges to a particular user. That is too much for the production, so we need the more specific resource filter. Any idea which resources are really required?