Section Access for NT users and Access Point

[dafnis14]

Hi,

I know there are plenty of resources about the subject, but I would like to verify the definitions that have to be done for my needs.

A specific QV model should be accessed only by designated users. No data reduction is needed.

Also, the model should be accessed for automatic reload task  and development.

We have two  licenses allocated from the server for  a service & development.

My questions are:

1. Regarding the section access:  Should I define the two admin users as well?
   ACCESS, NTNAME, PASSWORD
   ADMIN, UL\UL_QVUSER,*
   USER,  UL\UL_USER1,*
3. What should be defined in the document settings when no data reduction is needed?
4. What should be defined for that specific model in the server regarding reload a document with Section Access?

Thanks in advance!

[Miguel_Angel_Baeyens · Accepted solution]

1. At least the service account must be ADMIN, it's also good to add additional users (like yourself if you developed the app) to make sure they can open the application even if something goes wrong.
   • You don't need the PASSWORD field, unless you want your users to be prompted for a password. You can safely remove the PASSWORD field altogether, NTNAME is just fine
2. Reduction happens when a reduction field is specified in the section access table. Otherwise, all users can see all data, as long as they have access to the application, i.e.: they are in the section access table. No further settings required. However, a note here about the two possible document settings:
   • Initial reduction based on Section Access: You need to check this one in order to check the next
   • Strict Exclusion: any user who is not in the section access table will not be able to open the app, even if they can see it on the AccessPoint
3. When using NTNAME you don't need to specify username and password in the QMC task definition. It just works.

[tresesco]

If you don't need data reduction, section access might not be required; you could use QMC to provide the access to specific users allocating license to them. You could refer few discussions here in community like:

Re: Application Level Access through QMC

[dafnis14]

Thanks a lot, Miguel!

Much appreciated!

[dafnis14]

Hi,

Unfortunately, It's not enabled in SMB server...

Thanks!