Section Access Deployment

[#1]

We have been working on our first dashboard with section access in it.  We have it up and running on our local computers, once we try to run it though the management council the job fails.

The dashboard runs to completion without the section access in it.  (Strangely enough we have to completely DELETE section access from the load script to get it to run, if it is commented out the job fails!)

We tried editing the job and checking the section access box in the Reload tab.  This allows the job to run however we are denied access when we try to open it in access point.

Does anyone have any ideas or documentation on deploying section access?  I have the 'Introduction to Section Access' document, however that does not discuss deploying it through the management council

[Bill_Britt]

Hi,

The main thing is the Service Account needs to be added to Section Access and setup so that it can see all data.

Bill

[#3]

Thanks Bill,

When you say that I need to include the Service Account in the Section Access do you mean in the inline statement?  Is there anything special we need to do in the Management Council to show that the job has section access?

[#4]

I created a simple QVW with only 3 fields and applied section access to it.  Works great (on my desktop).

I tried loading it onto our test server and the job fails.

I tried checking the box on the Reload tab, Data Protection, Section Access... the job fails

I included my username and password in the same section mentioned above.... the job runs but ONLY I can get into the document

I have read documentation that said that the QlikView service account needs to be listed?  Does that go into my load script or in the management council? If its the management council, where does it belong?

Any help would be great, we have been struggling with this for days!

THANK YOU!!!

[mphekin12]

Kaitlyn,

The service account has to be listed in your load script under the NTName with the following format:  domain\serviceaccount.

You also have to set the service account in the QEMC.  Go to System and Setup, and select the service under the Distribution Services folder.  On the right side, click on the Advanced tab and enter the service accounts user name and password under the Section Access area.

I hope this helps.  I was struggling with this for days as well and this seemed to work for me.

Also, try to avoid using ALL and use * instead.

[#6]

MPHEKIN12,

Thank you so much, I feel like I am getting closer.  I added the service in the location you mentioned above and I am now able to sign in as two of the people listed however our ADMIN account does not work.  This is the script I am using in the QVW.... Any ideas?

Section Access;
LOAD * INLINE [
    ACCESS, USERID, PASSWORD, DEPARTMENT
    ADMIN, ADMIN, ADMIN,
    ADMIN, qlikview-service-name, PASSWORD,
    USER, M09849, M09849, BI
    USER, M01122, M01122, IT
];
Section Application;
LOAD * INLINE [
USERID, DEPARTMENT
    M09849, BI
    M01122, IT
];

[Bill_Britt]

HI,

Try this

Section Access;
LOAD * INLINE [
    ACCESS, USERID, PASSWORD, DEPARTMENT
    ADMIN, ADMIN, ADMIN,*
    ADMIN, qlikview-service-name, PASSWORD,
    USER, M09849, M09849, BI
    USER, M01122, M01122, IT
];
Section Application;
LOAD * INLINE [
USERID, DEPARTMENT
    M09849, BI
    M01122, IT
];

[#8]

Wouldn't the star limit the ADMIN view to only the two departments listed there?

[#9]

I just tried it with 'ALL'.  Works great on my desktop, when I run it through the council only the two USERS can log in

[mphekin12]

Kaitlyn,

I haven't had much success using ALL through AccessPoint either. ALL works fine when I log into a dashboard on the QV Server though.

You might have to list out each department in the section access file before using the * in your ADMIN record.