I just had a look at the latest blogroll post on using AD to limit access to QlikView. Very interesting stuff. One thing that wasn't mentioned, and that I am curious about, is how to use AD to limit access not to an entire QV file, but to certain parts of the data set.
The immediate example is limiting the leader of a regional office to access only his own region's data.
Is this doable? And can it be done automatically, so that an organization with several hundreds of regions could implement it?
As you know you can achieve it by using Section Access. How the Section access work's is it uses a set of selection's based on which the data is being reduced. For that we can use Document Properties -> Opening -> Initial Data reduction based on section access tag. Make it on & the application will reduce the data based on ur login credential's.
In your case u can use it in this format.
Load * INLINE[
ACCESS, NTNAME, Region
Admin, NTUser1, Region1
User, NTUser2, Region2
Admin, PowerNTUser, *]
Where * represents the user for which all the regions need to be shown. * represent's all. The Field Region should be present in ur data so it will create a join based on the field Name. So whenever user NTName1 tries to access the report the section access data get's reduced to only one row of the first user & because a join is there between the REgion of Section Access & ur Data . The data for Region1 will only be shown to the user.
In a very simple test document with a list box which show differents "délégation abr" (CENTRE,EST_NORD,EST_SUD...). I want to limit the access to only one délégation abr (CENTRE) for my USER2 and use the active directory connexion.