Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW

License Monitor Task fails with message Error: HTTP protocol error 403 (Forbidden)

No ratings
cancel
Showing results for 
Search instead for 
Did you mean: 
Anonymous
Not applicable

License Monitor Task fails with message Error: HTTP protocol error 403 (Forbidden)

Last Update:

Jan 10, 2023 3:05:12 AM

Updated By:

Sonja_Bauernfeind

Created date:

Dec 11, 2019 5:07:01 PM

Issue reported:

  • License Monitor Task fails with message Error: HTTP protocol error 403 (Forbidden)

Diagnosis:

  • Open "Tasks" in the QMC and view the 'information' icon within the 'status' column for the failed task
  • Download the Script log file
  • The downloaded Script Log file for the License Monitor ends with:

          2019-12-10 21:11:49      Error: HTTP protocol error 403 (Forbidden):
          2019-12-10 21:11:49      
          2019-12-10 21:11:49      The server refused to fulfill the request.
          2019-12-10 21:11:49      Execution Failed
          2019-12-10 21:11:49      Execution finished.

     

Cause(s):

The License Monitor acquires license data from the Qlik Sense Repository Service (QRS) through QRS API calls. The requests to these end-points are by default made by the user running the Qlik Sense services, but the related data connections may have been configured to run with a custom user. 

The user executing the API calls must fulfill two requirements;

  • User is not blocked in Qlik Sense
  • User is assigned RootAdmin role

Resolution:

 

Assign RootAdmin role to the user running Qlik Sense services

This is most often the only required action, since the license monitor app by default relies on user running Qlik Sense services.

  1. In the QMC, navigate to 'Users
  2. In the 'Users' under the User ID column find the row with the service account 
  3. Edit that service account row
  4. Select 'Add role' button
  5. Hover over the new field and select 'RootAdmin' in the list
  6. Reload License Monitor app

Run monitor app connections with customer RootAdmin account.

NOTE: This set is only required if a custom data connection user is required to comply with local security policies. 

Use a custom RootAdmin account for the Data Connections that start with monitor_apps_REST_*

  1. In the QMC, in the left panel under Manage Content, select Data Connections
  2. Under the 'Name' column are the connections starting with monitor_apps_REST_*
  3. Edit each of these data connections you will see a User ID and Password  field
    • Enter a user into the User ID field (domain\username format)
    • Enter a password in the Password field
  4. The user must have a 'Root Admin' role assignment;
    • In the QMC, navigate to 'Users
    • In the 'Users' under the User ID column find the row with the  desired user account 
    • Edit that service account row
    • Select 'Add role' button
    • Hover over the new field and select 'RootAdmin' in the list
  5. Reload License Monitor app

Confirm that UDC filter include account used for data connections

  • Confirm that user used for data connections is not marked as Blocked in QMC Users section
  • If user is blocked, adjust UDC filter to include the user account used for the Data Connections
  • Sync UDC and reload License Monitor app
Labels (2)
Comments
asifshah
Partner - Contributor
Partner - Contributor

Thank you so much, this worked for me.

Had been facing this exact issue for the past couple of days and then I added RootAdmin role to the service account which caused License Monitor application to reload successfully.

Version history
Last update:
‎2023-01-10 03:05 AM
Updated by: