Restrict User's Permission in QMC

[miguelbraga]

Hey there experts,

Recently I'm working on a project of building a Architecture with 2 Servers with QlikView Publisher functioning in clusters and in one of them the QMC is enabled to manage the 2 Servers. What I really want to know is what type of Account User I must choose to restrict the access to some parts of QMC to only show that user what he has permission? How can I add User and their permissions on QMC level?

Note: I'm not talking about Section Access and the permissions that the User have in some certain document. What I'm trying to explain is the Admin or Local permission on the QMC. The target here is to have many local users that can have access to the server and to the QMC but inside the QMC it only shows the user what he has permission to change/see. Is this doable? What steps I need to make to achieve this feat?

Any suggestions?

Do I need to apply this question to the Qlik Support?

marcus_sommer mbaeyens rwunderlich robert_mika swuehl gwassenaar mto‌ stalwar1‌

Best regards,

MB

[swuehl]

Not quite sure what these users should be able to do.

Maybe check if Document Administrators

https://help.qlik.com/en-US/qlikview/November2017/Subsystems/QMC/Content/QMC_PublisherDocumentAdmini...

will do the job for you.

[Miguel_Angel_Baeyens · Accepted solution]

The QMC allows document administrators and supervisors:

• User who can see Documents > Source Documents, who can create tasks on the folders they have been assigned as document administrators in the QMC > System > Setup > Distribution Services > General > Source Folders
• Modify some properties of a document already published in the QMC (e.g. set it to "Preload" or change its category) in QMC > System > Setup > QlikView Servers > Document Administrators
• Authorize users to already published documents (named Supervisors) in QMC > System > Setup > QlikView Servers > Folders > Supervisors

Notes:

• Any combination of the above for the same user is possible.
• Any other customization is not available out of the box.
• Any user member of the local group QlikView Administrators can see and do everything in the QMC

If you have used Qlik Sense, the level of granularity to define new users is much higher, but this does not apply to QlikView (i.e.: there are no security rules).

[Miguel_Angel_Baeyens]

Additionally, supervisors and document administrators can be set to either individual folders or any folder defined in the QMC ("Whole Server" in the Folder Access tab).

The QMC will display a limited "Status" tab and the corresponding "Documents" (Source, User or both).

The "System" tab is only available to members of the QlikView Administrators group.

[miguelbraga]

I'll study your document and let you know if what I'll find prove to be useful.

Best regards,

MB

[miguelbraga]

I'll try some of your recommendations and reach you out after exploring the results in QMC.

Best regards,

MB

[miguelbraga]

Hey there Miguel,

Your solution was more suitable for me. I have another question for you:

In QMC > Users > User Management > Groups > Group Name, what it means the group QlikView EDX? What is the functionality of this group?

Best regards and thank you for your answer,

MB 

[Miguel_Angel_Baeyens]

EDX is a way to trigger QMC tasks without access to the QMC and without dependence on other tasks, for example, calling programmatically from an external software.

To be able to run these types of tasks, the user account which will be running the software needs to be part of this group (https://help.qlik.com/en-US/qlikview/November2017/Subsystems/Server/Content/QlikView-Server/QVSRM_Pu...).

You have a good example here: Using EDX in QlikView 11 or here Using EDX in QlikView 11 - basic example and a more elaborated version here https://github.com/braathen/qv-edx-trigger