How to check the privileges of users who log in to Qlik Replicate or Qlik EM

[iti-attunity-sup]

Users who log in to the WEB UI can change their permissions using the Permission settings.
The method to check the user's permissions is as follows.
Please let me know if there is a way to check without using the WEB UI.

Check Permission settings from WEB UI:
SERVER⇒User Permissions

I would like to check the permissions of all users registered in Qlik.
Can you check using the following method?

・Use Qlik EM's REST API
・Check with Qlik command
・Check sqlite data
　ex) aemctl.exe repository export_acl -f c:\temp\acl.json -r "c:\Program Files\Attunity\Enterprise Manager\data\cfgrepo.sqlite"

[OritA]

Hi, 

I am not sure I fully understand what you are looking for but I will try to answer: 

In genreal you can use QEM restAPI GetServerAcl to display the users and groups that are defined with different roles in  QEM UI.

If you were refering to a need to follow users actions in QEM,  then you can turn on the audit option in QEM that writes into a file the actions that have been performed. For further information please refer to the following section in the documentation:
https://help.qlik.com/en-US/enterprise-manager/November2023/Content/EnterpriseManager/Main/Servers/c...

If this does not answer you question please open a saleforce case with elaborate information and may be an example of a scenario that you would like to be able to perform so we can look at it in more details.

Thanks & regards,

Orit

[Heinvandenheuvel]

As per @OritA the proper way is to use the QEM API.

And the good old UI, but you are trying to avoid that.

But sometimes you just cannot get there - possibly because the authentications are messed up. In that case,  you have to go for the guts on the Replicate server itself: Data\GlobalRepo.sqlite

The attached PowerShell script is made for that,  last tested under Replicate May 2023 (2023.5.0.152)

Note: This script requires the https://psqlite.codeplex.com sqlite module to be in the PowerShell Module load code path ( $env:PSModulePath ) - Remember to UNBLOCK!

PS C:\scripts> .\replicate_userconfiguration.ps1

admin_role - Users
    HEINV-LPW10\hein

admin_role - Groups
    HEINV-LPW10\AttunityReplicateAdmins

designer_role - Groups
    HEINV-LPW10\AttunityReplicateDesigners

operator_role - Users
    blah\blah
:
<snip>

Hein

[DesmondWOO · Accepted solution]

Hi @Heinvandenheuvel ,

It appears that the website https://psqlite.codeplex.com no long exists, and I am unable to access it or ping it.

Regards,
Desmond

[Heinvandenheuvel]

Ah. Thanks for the warning.

google suggests:  ihttps://www.powershellgallery.com/packages/SQLite/2.0

I haven't tried yet.

Hein.

[iti-attunity-sup]

Hello team,

Thank you for your response.
What I would like to obtain is the same content as the results output by the script.
However, I would prefer to avoid installing anything new if possible.
I was able to obtain similar information using the following command I mentioned initially; would this also be an alternative solution?
aemctl.exe repository export_acl -f c:\temp\acl.json -r "c:\Program Files\Attunity\Enterprise Manager\data\cfgrepo.sqlite"

The attached file contains the output results.

Regards,
Kobayashi

[Heinvandenheuvel]

it looks like your aemctl.exe repository export_acl -f ... solution only gets AEM control data.

My script gets the individual Replicate server configuration from a JSON blob in a GlobalRepo.sqlite.

Hein