Nprinting User Roles assignment

[manish_2991]

Hi Team

I have a large set of users around 15,000. For the downloading of reports through on demand I have to assign roles as 'User' to all the users.

But it's not possible to assign the roles manually to such a large set of users. Is there a way by which all the imported users will get roles assigned as 'User'. 

[Lech_Miszkiewicz]

Yes it is. Always use help site for such queries (help.qlik.com)

you can import users from LDAP or from Excel as described there: https://help.qlik.com/en-US/nprinting/May2022/Content/NPrinting/DeployingQVNprinting/Import-Users-Fi...

For OnDemand reports you may need to create dedicated role as from top of my head I don't think “User” role will be sufficient

[manish_2991]

HI 

Thanks for your reply

I have already imported users from LDAP and all users are getting synced perfectly.

Now the thing is that I want to assign a role 'User' (or any other new role created) to all the users imported from LDAP automatically instead of editing every user and providing the roles manually as the user set is too large.

Can we do that?

[Lech_Miszkiewicz]

Yes you can - it is explained in the link i gave you. Have you read it? which part of syncing “MemberOf” as role from LDAP you did not understand?

Also did you notice what i said about “user” role and that it will not be sufficient for onDemand?

[Ruggero_Piccoli]

Hi,

You can set the Role Membership field in the LDAP import

A Windows Domain user group must exist and be assigned to all users and have the same name as the Qlik NPrinting security role. 

I could also set an LDAP filter to limit the number of group to be associated with Roles. Also if only the domain groups with the same name as the security role are associated adding a filter to keep only the ones you want will let you to keep control:

Best Regards,

Ruggero

[manish_2991]

Hi @Ruggero_Piccoli 

Thanks for your revert.

I tried putting the LDAP fields 'appmember' in 'Role Membership', but the values of the same are not reflecting in the User Roles. I have also made the Roles as same as the 'appmember' values available in LDAP field.

Is there a case that the LDAP field should be 'memberof' only or it can be any other field of LDAP also.

Also, my users are not windows users. I am providing a User directory name in the LDAP connection and using the users for JWT authentication for generating on demand reports.