Skip to main content
Announcements
Qlik Connect 2024! Seize endless possibilities! LEARN MORE
cancel
Showing results for 
Search instead for 
Did you mean: 
raju_salmon
Creator II
Creator II

Section Access Question

Hi All,

I am implementing section access with best practices, i need to use NT NAME (user doesnot want to specifically login with SSO) for my section access.

Is it OK if i use ACCESS, NTNAME (DomainName\windowsLogin),REGION field?

or I need to use ACCESS, NTNAME (DomainName\windowsLogin),NTDOMAINSID, REGION field.

May i know the extra benefits by using NTDOMAINSID?

Here is my sample excel file.

  

ACCESSNTNAMENTDOMAINSIDREGION
ADMINACCESS.COM\UserLoginAA-X-5-18-353281543-3603327983-2995495364AJP
USERACCESS.COM\UserLoginBA-X-5-18-353281543-3603327983-2995495364USA
USERACCESS.COM\UserLoginCA-X-5-18-353281543-3603327983-2995495364NORTH
1 Solution

Accepted Solutions
avinashelite

Hi Raju,

1.Yes ACCESS and NTNAME is enough to build a section access .

2.If you want to reduce data then you can include the third field like REGION

3.

NTDOMAINSID

This field must contain a string corresponding to a Windows NT Domain SID.

Example: S-1-5-21-125976590-467238106-1092489882

QlikView will fetch the logon information from the OS and compare it to the value in

this field.

The NTDOMAINSID can be derived from the script, “Edit”->”Insert Domain SID”

Please check the attachment

View solution in original post

4 Replies
avinashelite

Hi Raju,

1.Yes ACCESS and NTNAME is enough to build a section access .

2.If you want to reduce data then you can include the third field like REGION

3.

NTDOMAINSID

This field must contain a string corresponding to a Windows NT Domain SID.

Example: S-1-5-21-125976590-467238106-1092489882

QlikView will fetch the logon information from the OS and compare it to the value in

this field.

The NTDOMAINSID can be derived from the script, “Edit”->”Insert Domain SID”

Please check the attachment

jonathandienst
Partner - Champion III
Partner - Champion III

The domain SID will prevent the document from being opened outside the domain. For example, a qvw sent by email (perhaps illicitly) will not be able to be opened by the recipient on their local machine/domain.

Logic will get you from a to b. Imagination will take you everywhere. - A Einstein
nagarjuna_kotha
Partner - Specialist II
Partner - Specialist II

Hi Raju,

Only USERNAME and NTNAME is enough to provide SA to your application.

-Nagarjun

raju_salmon
Creator II
Creator II
Author

USER NAME and NTNAME comes under NTNAME... am i right??

Like ACCESS.COM\UserLoginA

DomainName\Username