Security choices

[#1]

Hi,

I need an advise on what approach to take to apply Level 2 security to a dashboard.

Level 1 who can see the dashboard is based on groups in AD.

Ones you are in data should be filtered based on AD info what schools you have access to.

User types are :

-School principle (should see one school)

-superintendent1(should see several schools A,B,C)

-superintendent2(should see several schools D,E,F)

-superintendant3(should see all schools)

-admin(can see all schools)

Thanks,

L

[jpapador]

You'll want to use a feature called Section Application.  It essentially allows you to build a two column table and link it to a field to reduce what data a user can see.  Column 1 would be NTNAME, column 2 would be SCHOOL.  You can find help on the syntax by searching section application in the help section of qlikview or here on the community.

You would link that to the school field in your data model.

NTNAME, SCHOOL

[Principal name], A

[superintendent user 1], A

[superintendent user 1], B

[superintendent user 1], C

[superintendent user 2], D

[superintendent user 2], E

[superintendent user 2], F

etc

[Peter_Cammaert]

You mean "Section Access"?

[#4]

username,password,School

Admin,123,*

principle,123,A

[superintendent user 1], 123,A

[superintendent user 1], 123,B

[superintendent user 1],123, C

[superintendent user 2], 123,D

[superintendent user 2],123,E

[superintendent user 2], 123,F

etc

[#5]

thank you all

to use Section Access do I create user/school QVD based on AD info?

Can I use publisher so I filter data before dashboard loads per user, is it an option?

The dashboard is relatively big already and it will continue to grow every year. Performance could be an issue.

Thanks,

L

[Colin-Albert]

There is a comprehensive list of resources about Section Access here which should answer your question.

The list has been compiled by marcus_sommer

Section Access

[Colin-Albert]

If you have publisher, you can use Loop & Reduce to split your one large app into several smaller apps each containing data for one school or a group of schools.

You can use file / folder permissions and/or Section Access to control who can access this data.

[#8]

thanks,

I was wondering if splitting into apps per school is a good idea. there are 266 schools

[Colin-Albert]

If you use Section Access with Data Reduction and Strict Exclusion, data from schools the user does not have permission to view will be removed from the app they open anyhow.

Do your users just need to see data from one school or from a region or group of schools?

Have a look at the links on Section Access I posted earlier, there are several items on data reduction.

[#10]

principles see one school only (266 schools), superintendents see different groups (up to 30 groups)