User Access to Apps

[dmohanty]

Hi All,

Let I have 2 Apps deployed. Now I have 10 users. Now I need to give access to users, let 4 users would access only App1 and 6 users would access only App2.

How this can be achived from QMC perspective? Please elaborate.

Regards!!!

[Miguel_Angel_Baeyens]

Hi,

When using DMS what you have to do to avoid users seeing documents for other users is to have a field in the QVW with the users in the form DOMAIN\USERNAME, so the task can distribute and authorize to these users.

The task must be set in the QMC, Documents, Source Documents, and in the reload task, Distribute tab, Loop Field in Document, click on Open Document, select the field that stores the users in the DOMAIN\USERNAME form, and make it Check user Identity on "SAM Account Name".

As with DMS is QlikView and not the operating system who controls access to files, this is irrespective of licenses. If a user is authorized, he will be able to see the document and shold he has a license, to open the document. Otherwise, the user will not even be able to see the document.

Hope that helps.

Miguel

[dmohanty]

Hi Miguel,

Thanks for throwing some light. Am able to get something now.

But wanted how and where to add the field with the users in the form DOMAIN\USERNAME? Is it something has to be done by INLINE statement?

Could you show a sample script?

[dmohanty]

Hi Miguel,

I did like this in the Main page of one of the app in my Source Document Folder:

Users:

Load * INLINE

[

USERID

XYZ\AB12345

UVW\CD54321

];

And changed the settings in th QMC in the way you suggested.

Now suppose I log in to Access Point other than the above ID, should not I see the particular App?

Regards!!!

[Miguel_Angel_Baeyens]

Hi,

Yes, that is correct. If you are not any of those users, you will not be able to see the document.

Note that those users are not USERID but NTNAME. You can find advanced section access script code examples in these posts (among many others):

http://community.qlik.com/thread/38492

http://community.qlik.com/thread/54877

http://community.qlik.com/thread/29086

http://community.qlik.com/thread/9890

Hope that helps.

Miguel

[dmohanty]

Hi Miguel,

Thanks I will check those threads.

While using the "Loop Field in Document", shall we have to use the "Manually" section as well to distribute to Access Point folder?

I mean to ask both the tabs should be enabled or only 2nd one?

[Miguel_Angel_Baeyens]

Hi,

It one or the other. If you use "Loop Field" you don't need to use the "Manually". You can specify a folder in a QlikView server or a folder in the filesystem to store the distributed documents.

Regards.

Miguel

[dmohanty · Accepted solution]

Thanks Miguel for the help.

Currently QDS is not functioning, because of this probably I am unable to get the desired solution as suggested above . I did exactly the same way as u mentioned, but the App is not getting distributed. Is it because of failed QVS, I am not getting the solution? I will try again once my QDS is available.

Infact I tried the follwing steps also and it worked perfectly:

·         Go to User Documents

·         Select any App you want to provide access

·         Go to Authorization tab; select Named Users

·         Click on Add Users and Groups

·         Search for the NTNAME you want to give access(Domain\ UserID)

·         Add the desired name to the RHS Box.

·         Log in to the Access Point with the ID you have give access to the App.

·         Now the particular app is visble in Access Point

·         Log in to Access Point with the ID other than the Named User

·         The particular App won’t be visible in the Access Point

Regards!!!

[juampe]

Hello Miguel, I am a really fan of your post.

I am trying what you just said and I could´t get it. So to resume:

• DMS configuration

• In the QLikView app I have the following
  • Strict Exlucsion
  • Filter Access...

• In the Script in the App I have the folllowing ( i donnt know if NTNAME is necesaary or if I use USERID is ok)

SECTION ACCESS;

LOAD * INLINE [

    ACCESS, USERID, DIRECCION

    USER, X339830,CENTRO DE SERVICIOS

    USER, X533916,ADMINISTRACION

    USER, X855123,* 

    USER, X855123,ADMININTRACION

    ];

• Continue with the following instructions

So once I execute the task all my collegues have access to the application via Access Point and  the configuration of the Loop Field in Document was deleted after reload or execute the task

Any Idea?

[Miguel_Angel_Baeyens]

The attribute sAMAccountName requires the form of DIRECTORY\USER. You will need to use NTNAME field in Section Access instead, using this form.

Remember to add the service account to the section access so the QDS can open the document.

The purpose of USERID is to prompt the user to type a username, even if there is no PASSWORD.

This post is over 4 years old, there might be some changes affecting to this behavior as well.

[juampe]

Working on that! You really help me to slove this.

I was trying to reload from INLINE Section Access Table and it works but it didnt work from qvd file.

I also read about to add a sentence "where 1=1" but still not working.

I think the problem is what you said about adding the service account.

Could you please let me know where is located this service account.

Sorry if is a dumb question but we are learning how to deal with QlikServer/publisher and we find it a little tricky.

Once again thanbk you so much with this.