Skip to main content
Announcements
July 15, NEW Customer Portal: Initial launch will improve how you submit Support Cases. READ MORE

Offline User Assignment Log

No ratings
cancel
Showing results for 
Search instead for 
Did you mean: 
Sonja_Bauernfeind
Digital Support
Digital Support

Offline User Assignment Log

Last Update:

Nov 6, 2023 5:44:18 AM

Updated By:

Sonja_Bauernfeind

Created date:

Jul 9, 2020 5:44:39 AM

As part of the agreement of granting a customer offline license usage, the customer is required to regularly upload User Assignment log files.   This essentially replicates the user assignment data which is sent to Qlik in a manual process.  

 

Applicable Products:

Qlik Sense Enterprise on Windows 
QlikView 
Licensed with a long term offline license. 

 

⚠️ FYI: All information regarding user subject (user information) is hashed using SHA256 to prevent Qlik from accessing the original data.  (The information is encrypted both in transit and at rest).  ⚠️

 

Data transmitted in the log files: 

User Assignment Log File Content

Data Stored In Logs

Data Element

Comment

Sample Data

Signed License Key

 

See above

Allotment name 

Professional / Analyzer

“professional”

Subject

Domain / User ID;
if this an add or delete transaction. By delete the subject will be removed immediately. An internal id will be used to secure sync to other deployments using the same Signed License Key. The internal id will disappear within 60 days after a delete transaction.
(This information is stored for all assigned users until such a time that the assignment is deleted at which point it is deleted. The information is used for synchronizing assignments across deployments in order to facilitate the single-license-multi-deployment scenario. It is encrypted in transit and at rest.)

“acme\bob” user name included in hashed form in the log files and will show as something like:

a24a2f2b67c5e051bcb6cd2d7a9f7ebe

User agent

Build by the License service version (operating system) and Product (e.g. QSEfW, QCS, QSEfE, ADBI, Qlik Core, QV)

Licenses/1.6.4 (windows) QSEfW

Source

Hashed ID to make each deployment unique, e.g. a Qlik Sense Enterprise on Windows and a Qlik Sense Enterprise on Kubernetes will have different Source ID's

fbe89d02-6d24-4595-915e-c52ce76f2195
 

Sync metadata

Versioning information about the subjects and list of subjects to manage the synchronization process.

To review the information, copy the message content of the log and decode it using a base64 decoder.

{ "source": "my assignments",
    "bases": [{ "license": "1234 1234 1234 1234",
 "version": 0 }], "patches": [{
 "instance": "", "version": 0,
            "license": "1234 1234 1234 1234", "allotment": "analyzer", "subject": \\generated4, "created": "2019-04-18T10:01:35.024031Z" }
 

 

 

Related Content:

 

Labels (1)
Comments
Sonja_Bauernfeind
Digital Support
Digital Support

Hello @sis 

All user information is encrypted at all times and no sensitive data is submitted in the sync metadata field. As for your second question, we are looking into this for you.

All the best,
Sonja

Sonja_Bauernfeind
Digital Support
Digital Support

Hello @sis 

To return to answering your questions:

Question: Does the Data Element "Sync metadata" contain sensitive information other than the user ID?
Answer: Sync metadata does not include any sensitive information. You can verify what is sent by decoding the message in the log in a Base64 decoder. This will show you what is sent to Qlik.

Question: Will the contents of the Data Element "Sync metadata" be encrypted in the same way as the Data Element "Signed License Key" and "Subject"?
Answer: It is not encrypted, but it does not include any sensitive information. It is base64 encoded in the log file, and you can decode it using any available base64 decoder. 

All the best,
Sonja 

sis
Partner - Specialist
Partner - Specialist

@Sonja_Bauernfeind 

 

Thanks for the answer.

Is it correct to recognize that only the following parts contain user information? Is there anything else?


 ・ The part called Domain / User ID where the Data Element is listed in "Subject"

sis_0-1699325672211.png

 ・ Data Element is the "subject" part of "Sync metadata"

 sis_1-1699325794806.png

 

Sonja_Bauernfeind
Digital Support
Digital Support

@sis Sync metadata does not include User information. User information is included in Subject and is hashed.

 

sis
Partner - Specialist
Partner - Specialist

Thank you, Sonja.

Sonja_Bauernfeind
Digital Support
Digital Support

Anytime!

Contributors
Version history
Last update:
‎2023-11-06 05:44 AM
Updated by: