Build Auto Disabling Workflow for Incactive users

[Vasujoshi_700]

Hi Team,

 I am looking to build a workflow that disables users who do not log in to the Qlik Cloud for a certain time period, let's say 10 days. It will get those user IDs and disable them all at once automatically when it has been more than 10 days, and also send them a warning email and a disablement email.

I need to prepare the workflow that disables inactive users automatically.

we are able to get last login details from the Qlik Entitlement Analyzer app and also have an API to update users from the Qlik API doc,

I need to understand how we can make requests from Qlik Automation via the Call Raw API block. Kindly feel free to suggest any other better approach to meet this requirement.

i m referring to the link: https://community.qlik.com/t5/Official-Support-Articles/How-to-use-the-Raw-API-Request-blocks-in-Qli...

[stevedark]

Hi @Vasujoshi_700 

If I were to look at something similar I would look at doing it in a Qlik load script, rather than an automation. Here you can call both GET and PUT REST connections, to download usage and then make another call to remove any users that have not used their licence since a set amount of time.

The getting usage data is included in one of the scripts that ships with my Instant Sense Template, which can be downloaded for free from here:
https://www.quickintelligence.co.uk/isa

[Shai_E]

Hi @Vasujoshi_700 

What do you exactally need?

Because you mentioned the following:

"I need to understand how we can make requests from Qlik Automation via the Call Raw API block, and feel free to suggest any other better approach."

And then you provided a guide on how to use the block.

Thanks

[Vasujoshi_700]

Hi Shai, I am looking to build a workflow that disables users who do not log in to the Qlik Cloud for a certain time period, let's say 10 days. It will get those user IDs and disable them all at once automatically when it has been more than 10 days, and also send them a warning email and a disablement email.

Thanks and Regards,

VJ

[Shai_E]

I see,

From a quick check i did, in QAA at least i dont think this will be an easy thing to implement.
The main hurdle is what api endpoint to use to get the login information.

I cant seem to find something like this.

The only place that i can think about is maybe the events api, it should have every type of event logged to what a user is doing in the tenant.

The only thing is to find out what event to look for.

Maybe:

"com.qlik.core.user-session.begun"

But its a guess, then you can check for those types and see when was the latest one and do something based on that.

[Vasujoshi_700]

Hi Shai,

Users last login details can be extracted from entitlement analyzer app and via Qlik application automation we can set conditional statements on those extracted users list but the hard part to me is to send api request to disable these users, how can we manage to do that.

[Shai_E]

You should be able to do it with the following endpoint

Users REST | Qlik Developer Portal

Didnt test it yet, i will try tomorrow.

[Shai_E]

@Vasujoshi_700 

You have a block for this in Qlik Platform Operation connector, built in named "Update User"

[Vasujoshi_700]

Hi can you give the screenshot where to navigate it.

[Vasujoshi_700]

Hi Shai,

i am able to get the user id but its format is different than that is required in update user bolck.

I also tried simply puting user id it is giving 403 forbidden error inspite having tenant access.