Active directory groups

[denis115]

Hi everyone!

I need to know if it is possible to hide sheet from AD groups?

I have 3 users and 3 groups and what I want is :

user1 (from ad group Q1) =sheet 1

user2 (from ad group Q2)=sheet 2

user3 (from ad group Q3)=sheet3

thank you!

[denis115]

does it mean that there is no way to hide sheet from ad-group?

[marcus_sommer]

I agree with Staffan - section access accepts active directory groups as well as users but osuser() will always return the username and could therefore not be used to control anything on a group-level. Here are various examples how it could be implemented:

Sheets Security with Section Access

Sheets Security with Section Access File

Section Access - Hide Sheet Level

Chart Level Access by user

Sheet level access

Beside this the sheet-control is without further measures which successfully prevents the creation of new objects or changing existent ones only a special kind of usability and not a real secure approach. Therefore I suggest to reduce the data, too.

- Marcus

[stabben23]

I'll think you in some way have to create a list with all users one by one and therefore looses the opportunity to use Groups. I could be wrong, but havent found anything in the community With this kind of solution.

bbt‌ mybe knows more about this

[denis115]

in each ad-group is only one persone , it was made because if a persone go from job and in his place come another persone the username will be changed but group will remain

[stabben23]

Yes, thats why Groups in AD are used, but in this case it doesnt helps. I have earlier read directly from AD-database and create lists With all users and also flagged them who should have Access to what.

You can save this in a qvd and use it as Section Access, this will be on userlevel, but it will reflect the changes in AD-database, ex if someone quit hes job.

Have a look here

Section Access (Data Reduction) using Active Directory

[Bill_Britt]

Hi,

I stole this code from another post and made changes. In the below TESTA is a group and the code does work.

SECURITY:

LOAD * INLINE [

   ACCESS,     NTNAME,                     USER,        COUNTRY

    ADMIN,     ADMINISTRATOR,                   *,*

    USER,     USER1,                         USER1,    MEXICO

    USER,     TESTA,                         TESTA,    USA   

];

Section Application;

/* CHANGE THE NTNAME AND USER VALUES TO REFLECT YOUR OWN USERS */

SHEET_ACCESS:

LOAD * INLINE [

    USER,             SHEET1,     SHEET2

    USER1,          1,             0

    TESTA,          0,             1   

];

[denis115]

sheet 1 and sheet 2 are LIST ID?

[stabben23]

No those are just fictitious Field name. Have a look here page1 and page 2 for a better understanding.

Section Access - Hide Sheet Level