section access with AD groups

[singhcv123]

Hi ,

i am recently working in section access with AD group .

but as per my scenario we need to add 5 user and these user can see 1 sheet ...other user can not.

but other users are more than 500.

is there any way that (not equal to ) works in section access script.

Section Access; 

Security: 

LOAD * INLINE [ 

ACCESS, UPPER(NTNAME) AS NTNAME,UPPER(USERNAME) AS USERNAME 

ADMIN, amazon\AWS PROD Qlikview Power Users,amazon\AWS PROD Qlikview Power Users

USER, amazon\AWS UAT Qlikview Power Users,amazon\AWS UAT Qlikview Power Users

]; 

Section Application; 

SheetAccess: 

LOAD * INLINE [ 

USERNAME, SHEET1FLAG, SHEET2FLAG 

amazon\AWS PROD Qlikview Power Users, 0,0

amzon\AWS UAT Qlikview Power Users, 0,1 

];

as per below script i don't wat that other than amzon\AWS UAT Qlikview Power Users can not see this sheet hence they can view other sheets in documents.

ouer group "AWS UAT Qlikview Power Users" having those 5 user but other users are in different -2 groups that we cannot mention here in script .

please suggest is there any mechanism that we can manage the sheet access for 5 users and other user can only see other sheets not this one.....please suggest the code logic.

[its_anandrjs]

Try this ways

Section Access;

Security:

Load ACCESS, UPPER(NTNAME) AS NTNAME, UPPER(USERNAME) AS USERNAME;

LOAD * INLINE

[

ACCESS,  NTNAME, USERNAME

ADMIN, amazon\AWS PROD Qlikview Power Users,amazon\AWS PROD Qlikview Power Users

USER, amazon\AWS UAT Qlikview Power Users,amazon\AWS UAT Qlikview Power Users

];

Section Application;

SheetAccess:

LOAD * INLINE [

USERNAME, SHEET1FLAG, SHEET2FLAG

amazon\AWS PROD Qlikview Power Users, 0,0

amzon\AWS UAT Qlikview Power Users, 0,1

];

Regards

Anand

[singhcv123]

no this will not help........i want other than 1 group can not access particular sheet.but they can access other sheet.

other than 1 group there are more than 500 user......that's why i am looking for someting like <> in section access

[marcus_sommer]

AFAIK that's not possible with ad groups. Are the user member of a ad group which aren't allowed to access this sheet you couldn't give them access in any way - one access denial meant it's always denied regardless if there are further authorizations.

This meant you need to use single user instead of user groups (this mustn't be done manually - there are ways to read an ad) or more practically by 5 users: you used a visibility-condition for this sheet like:

if(match(osuser(), 'user1', 'user2', ...), true(), false())

- Marcus

[its_anandrjs]

I agree with the Marcus which is difficult as well as you can do another way by creating a group in the script by assuming they are this group and add the users which are belongs to this groups after this use section access for this group to restrict this users by section access.

Regards

Anand