SAML Integration - Permissions on Managed Spaces

[Paulo_IntelFab]

Hi, all. 
    I integrated one of my tenants (I use 2 tenants) to a Microsoft Entra ID to use the Single Sign On feature. 
    I have questions about Permissions on a Managed Space:
    - Every time I share one application to an user, it takes the same permission to all applications on the space. 
    - I need to give permissions by application. 

    Using my other tenant (users are managed inside Qlik), I can manage permissions to a single application for any user. 
    My question?
    - It is this way by design?
    - Or there's some configuration guideline to help me with this feature?  

Appreciate any help! 

[Daniele_Purrone]

Hi @Paulo_IntelFab ,

that seems like a weird behaviour, indeed.
Can you please share a screenshot of the space members (you can obscure names, of course)?

Also, after sharing an app, go to Administration --> Events --> filter by source "com.qlik/spaces" and expand both the "com.qlik.v1.space.share.created" and "com.qlik.space.share.created" event types.
Can you verify that there is a resourceId there? (it should be the appId).

[Paulo_IntelFab]

Hi, Daniele. I'll annex part of the sequence I've tested.
I made a few tests, but the first sequence was this one attached (4 images). 

The result is always put the permission on the managed space and not on the application selected.

[Daniele_Purrone]

Thanks @Paulo_IntelFab !

Please, contact support directly mentioning this discussion to open a support case.
It would be good if you could capture the har file when sharing an app.