NPrinting Reports, Tasks and Connections that use Section Access Fail or Access Denied errors

[Frank_S]

Symptoms Reported

• NPrinting Report(s) inside a publish task with connections to QVWs or QVFs that use Section Access do not work as expected.
• NPrinting Connections fail to execute normally despite connection verification completing successfully
• Section access check box is selected in the NPrinting connection however section access is not respected
• NPrinting publish task recipients are ignored in the report production despite that they are included in the Qlik Sense app load script
• NPrinting Connections, Publish Tasks fail. NPrinting error logs shows 'failed to open document'

Environment

• Qlik NPrinting 

Diagnosis:

• Is the Qlik Sense app in a 'Published' State or is it 'Unpublished'?
• Is the NPrinting Service account part of the load script in either the Qlik Sense or QlikView application
• Check if the NPrinting, QlikView, Qlik Sense servers and domain accounts are in the same domain
• Look for On Open triggers (QlikView) that might block the document from opening. Unsupported QlikView Document item... - Qlik Community - 1714896 

Resolution:

1. To ensure expected section access processing, the Qlik Sense app MUST be 'Published' in the QMC>Apps interface. Connecting to Qlik Sense apps with section access
2. Ensure that section access is configured accurately in the load script. (see example below)
3. Each user that requires access to NPrinting reports (including the NPrinting service user account) are accurately added to the load script
4. Ensure the NP service account is a member of the NP server local administrators group
5. If Qlik Sense
   • ensure the NP service account is rootadmin on the Qlik Sense server
   • ensure the NP service account or other users in the load script are not limited by any Qlik Sense rules
6. If QlikView, ensure the NP service account is member of the QlikView administrators group on the QlikView Server(s)
7. Ensure the NPrinting, QlikView, Qlik Sense servers and related service accounts are all members of the same domain

Sample working Section Access Code:

// The following format is required for NP connection identity/domain account used in the NPrinting Connection. Recommend using the NPrinting Service User Account as the connection identity when section access is used in QV or QS source documents

//Example below - domain\npsensesvc is NP service account and is used as the NPrinting Connection Identity

// ADMIN, domain\npsensesvc, *

//The dimension 'Year' must be type accurately thus match the 'case' used in the source QS app


section access;
LOAD * inline [
ACCESS, USERID, REDUCTION
ADMIN, domain\npsensesvc, *
USER, domain\user1, 1
USER, domain\user2, 2
];
section application;


star is *;
LOAD * inline [
REDUCTION, Year
1, 2019
2, 2020
3, 2021
4, *
];

Related Content

• https://help.qlik.com/en-US/nprinting/Content/NPrinting/DeployingQVNprinting/Section-access.htm#anch...
• https://community.qlik.com/t5/Knowledge/How-does-Nprinting-Handle-Multiple-Concurrent-Publish-Task/t...

Investigation (internal) ID:

• OP-9990