Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Qlik Open Lakehouse is Now Generally Available! Discover the key highlights and partner resources here.
cancel
Showing results for 
Search instead for 
Did you mean: 
raju_salmon
Creator II
Creator II

Section Access Question

Hi All,

I am implementing section access with best practices, i need to use NT NAME (user doesnot want to specifically login with SSO) for my section access.

Is it OK if i use ACCESS, NTNAME (DomainName\windowsLogin),REGION field?

or I need to use ACCESS, NTNAME (DomainName\windowsLogin),NTDOMAINSID, REGION field.

May i know the extra benefits by using NTDOMAINSID?

Here is my sample excel file.

  

ACCESSNTNAMENTDOMAINSIDREGION
ADMINACCESS.COM\UserLoginAA-X-5-18-353281543-3603327983-2995495364AJP
USERACCESS.COM\UserLoginBA-X-5-18-353281543-3603327983-2995495364USA
USERACCESS.COM\UserLoginCA-X-5-18-353281543-3603327983-2995495364NORTH
1 Solution

Accepted Solutions
avinashelite

Hi Raju,

1.Yes ACCESS and NTNAME is enough to build a section access .

2.If you want to reduce data then you can include the third field like REGION

3.

NTDOMAINSID

This field must contain a string corresponding to a Windows NT Domain SID.

Example: S-1-5-21-125976590-467238106-1092489882

QlikView will fetch the logon information from the OS and compare it to the value in

this field.

The NTDOMAINSID can be derived from the script, “Edit”->”Insert Domain SID”

Please check the attachment

View solution in original post

4 Replies
avinashelite

Hi Raju,

1.Yes ACCESS and NTNAME is enough to build a section access .

2.If you want to reduce data then you can include the third field like REGION

3.

NTDOMAINSID

This field must contain a string corresponding to a Windows NT Domain SID.

Example: S-1-5-21-125976590-467238106-1092489882

QlikView will fetch the logon information from the OS and compare it to the value in

this field.

The NTDOMAINSID can be derived from the script, “Edit”->”Insert Domain SID”

Please check the attachment

jonathandienst
Partner - Champion III
Partner - Champion III

The domain SID will prevent the document from being opened outside the domain. For example, a qvw sent by email (perhaps illicitly) will not be able to be opened by the recipient on their local machine/domain.

Logic will get you from a to b. Imagination will take you everywhere. - A Einstein
nagarjuna_kotha
Partner - Specialist II
Partner - Specialist II

Hi Raju,

Only USERNAME and NTNAME is enough to provide SA to your application.

-Nagarjun

raju_salmon
Creator II
Creator II
Author

USER NAME and NTNAME comes under NTNAME... am i right??

Like ACCESS.COM\UserLoginA

DomainName\Username