Qlik Community

QlikView Deployment

Discussion Board for collaboration related to QlikView Deployment.

Not applicable

DMS group authorization

Team - How do we utilize active directory groups with DMS mode? We don not want to give individual rights to each document.

We want to use DMS authorization to control access to qvw's. We can give access to individuals and it works fine, but it does not works when we give access to groups.

Any help will be appreciated.

Thanks

1 Solution

Accepted Solutions
lhr
Contributor III

DMS group authorization

you need to set up the directory service connector (dsc) for group resolution to work in dms mode.

configure an active directory connection in QEMC -> system -> setup -> dsc -> active directory. normally all you need to do here is to press the little button next to the path and apply.

note the url to the dsc on the summary tab.

verify that the qvs has the same url in system -> setup -> qvs -> security.

verify that the account running the qvs is member of the local group qlikview administrators on the machine running the dsc.

restart the qvs.

cheers,

lars

6 Replies
lhr
Contributor III

DMS group authorization

you need to set up the directory service connector (dsc) for group resolution to work in dms mode.

configure an active directory connection in QEMC -> system -> setup -> dsc -> active directory. normally all you need to do here is to press the little button next to the path and apply.

note the url to the dsc on the summary tab.

verify that the qvs has the same url in system -> setup -> qvs -> security.

verify that the account running the qvs is member of the local group qlikview administrators on the machine running the dsc.

restart the qvs.

cheers,

lars

Not applicable

DMS group authorization

Thanks Lars,

It will still not work, I understand from qliktech support that DMS authorization does not works without Publisher, and we do not have Publisher License at the current client location.

Have you tried it without Publisher? Please let me know and we will try that.

Thanks again

vgutkovsky
Honored Contributor II

DMS group authorization

In my experience, if you want to use AD groups with DMS authorization, you need to specify the DSC in Distinguished format. For example, if your domain is test.mydomain.com, then distinguished format would be: LDAP://DC=test,DC=mydomain,DC=com

You also need to be careful how you specify the AD groups in the Authorization tab since it's sensitive to .com, .local, etc. Thankfully, it's not case-sensitive Smiley Happy

Regards,

lhr
Contributor III

DMS group authorization

no i haven't tried that, but if support says it won't work...

/lars

vgutkovsky
Honored Contributor II

DMS group authorization

Oops, didn't notice that there is not Publisher. I've never tried it w/o Publisher so I couldn't really say...

Not applicable

DMS group authorization

Hi Vlad - Support has made it clear that without Publisher DMS authorization does not works.

Thanks again to everyone on providing their input on this.

Regards

Community Browser