NPrinting - Creating Connection - Full Access?

[JanFloren]

Hi,

When creating a NPrinting connection to a QlikSense App, you provide the proxy id, app id and also the identity. We're currently using the NPrinting service account (who has rootadmin rights on the QlikSense server), but this means that every NPrinting developer can access the data of all QlikSense apps? (In Sense Hub, it's restricted by the security rules). 

Is there a way to put security on this? Is it a best practice to always use the service account as identity? All ideas are welcome.

Thanks.
Jan

[Lech_Miszkiewicz]

Well,

here are requirements regarding user used for creating connection: 

https://help.qlik.com/en-US/nprinting/June2019/Content/NPrinting/GettingStarted/HowCreateConnections...

now regarding developers in NPrinting... Instead of using default security roles for develeopers you can create app specific roles and assign them to people who meant to be developers so they can only work on data they are allowed to see. Again - all well described in official documentation here:

https://help.qlik.com/en-US/nprinting/June2019/Content/NPrinting/DeployingQVNprinting/Managing-roles...

regards

Lech

[JanFloren]

Thanks for your input. The only downside of the roles aspect is that when people got removed from AD groups, this also needs to be updated... the security is no longer centralized.

Kind regards,

Jan

[Lech_Miszkiewicz]

That is not true - roles can be managed via AD memberOf attribute

details are obviously in official documentation:

https://help.qlik.com/en-US/nprinting/June2019/Content/NPrinting/DeployingQVNprinting/Import-Users-F...

hope this helps 🙂