qlikview permission panel

[Masi_Sahargahi]

Hi,

Recently we have been told to create a panel for a admin so she(isn't IT expert) can be able to get permission to users(from a form).We have a table showing that which users from which branch have permission to which reports and we should create a from based on this table and use the table's records as reports permission. How can I do this without using section access.

Here is what I've done for setting permissions:

• We Authenticate users by their Domain Username
• For any document we have two tasks:

                     one with reduction for Branch's users who have limited access (loaded permission table in qlikview document                       as well)         

                    one for head office users whom I add as named users and are supposed to see all data.

[Miguel_Angel_Baeyens]

Would it be possible to have such table on an excel spreadsheet you provide her with two columns NTNAME (which must be the user account in the form DOMAIN\ACCOUNT) and REDUCTION (the actual name of the field you are using, instead)?

You can use this table with an $(Include=) in the Section Access table in addition to a manual table, i.e.: INLINE where you specify your own accounts and the server account so the QVW is never locked out by mistake or if the file is removed or changed.

The provide Document Administrator permissions for the user so she can go to the QMC and hit "reload".

Creating 2 tasks per user is OK if you have 2 or 3 users, but as soon as you have a dozen, you will need to start cleaning up those users no longer active, some tasks will have to be prioritized as not all tasks can run at the same time, etc.

If security means the user is only allowed to see his data and not anything else, I think the above should be simple enough if it's well documented. Going to the QMC might sound an overkill, but if it is properly set, a Document Administrator will not get lost with plenty of options, and following the steps to reload the document is simple.

In case of errors in the reload, you or the platform admins would have to take a look, nevertheless.

[rwunderlich]

A simple approach I've seen many customers take is to create a separate Active Directory Domain Group for each QV Document. For example:

"Qlik Sales All'
"Qlik Sales Reduced"

And then distribute to those groups.  Users are granted permission by being added to the group.  This allows you to manage the permissions using AD tools and provides harmony with the rest of your enterprise security administration.  There are lots of free or low cost graphical AD tools available.

-Rob
http://masterssummit.com
http://qlikviewcookbook.com
http://www.easyqlik.com