Hello Jarrad,
I'm chiming in with some details on how access is given in QlikView and how licenses are being handed out. That might help a little with finding out where the problem is in your setup.
You mention that you have named CALs on one machine, Session CALs on another, which would mean you have two different QlikView servers and licenses for them, but let's ignore this for now.
QlikView goes through three stages before it allows a user to open a document.
Stage one is authentication, which is where the user hits the AccessPoint (http://somethingsomething/qlikview) and is being authenticated by whatever authentication method you have in place. For example just straight forward Windows authentication, so you get logged in with the same user that you are logged on to your PC / laptop with.
Authentication doesn't actually do anything else though at this point. This is done by the WebServer, generally.
Stage two, the WebServer asks the QlikView Server "What is this user allowed to access?" That's authorization.
At this point, the QlikView Server checks what the authenticated user has access to. Out of the box, QlikView does that by using NTFS permissions, so the end user needs to have read permissions to the .qvw on disk. That is either done by managing access directly on that folder where the .qvws are stored, or you have a QlikView Publisher that does that during the distribution.
If the user is authorized to open the document, they can then also see it on the AccessPoint.
(There is also Section Access, that is a separate security mechanism. If a document has Section Access, and the user is not allowed to open it based on that, it will not show up on the AccessPoint either by default.)
Stage three is "Do you have a license to use the product?" When the user clicks on the document, the QlikView server then checks if that user has a CAL. If they do not have a Named CAL, it gives them a Session CAL.
All CALs (Named CAL, User CAL, etc..) come from the same place. Your QlikView Server License. They are recorded in the LEF of the server, and their allocation to users is stored in the .pgo files that QlikView Server uses. That is why I doubt you have them actually split up in two systems unless you are using two separate QlikView servers to serve two different sets of documents.
This line of your last query here:
the issue that I'm having is that a new member of staff can see the server but not any of the documents within (and as such not get a license).
I am thinking maybe the new user hasn't yet been added to the correct group, or not been given the correct file access permissions to see the documents at all.
Here is some more information about authorization in QlikView. It also covers the second method we have, DMS mode, just in case that is the one you are using.
Don't forget to Like posts and use the "Accept as Solution" button on content that answered your question! Thanks 🙂
