Authentication. Who are you? How did you prove it?
In QlikView, the authentication of a user is almost always done against an external entity that is then used to pass the externally authenticated user identity to the QlikView Server.
Authorization. What are you allowed to see? What are you allowed to do?
After authentication
Understand what authority or rights the user have to applications, data or both.
Authorization on application (qvw doc level)
In Qlikview Desktop is managed by Windows (NTFS File Security)
In Qlikview Server is managed by QVS, can be Windows NTFS (if users and group are in AD or local to server) or DMS (assigned by Qlikview)
Authorization on data (row and/or field level security)
Managed with Section Access inside the Qlikview document
QlikView Security Video Series (1 of 8): An Overview
