Skip to main content
Announcements
Live today at 11 AM ET. Get your questions about Qlik Connect answered, or just listen in. SIGN UP NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
Not applicable

The number of NAMED CALS varying in QMC without performing any operations like adding or deleting any user.

Kindly advise as the number of license assigned should not vary automatically .

Adding to that ,we provide access to the users manually . we could not figure out anything studying the log files and Qlikview Governance dashboard.

1 Solution

Accepted Solutions
Peter_Cammaert
Partner - Champion III
Partner - Champion III

The theory is like this (if you read your license agreement): licenses can be assigned to a user and should stay assigned to that user except if the user leaves your company or changes roles/assignments.

When you apply this rule, you will see that it isn't in the interest of manageability and access control to automatically assign licenses to anyone who (accidentally) visits the AccessPoint, without additional safeguards. Because that is how "Allow Dynamic CAL assignment" works: anyone who visits the AccessPoint and clicks a QlikView document will get a Named CAL assigned to his/her Windows account.

You can control access to QlikView documents by either manually assigning CALs (especially Document CALs -> No CAL = No entry to this document), or by implementing a second access control management system (like Section Access) to block people from entering off-limits documents and getting a CAL assigned that they shouldn't have. The second technique works because Section Access ACLs are checked before a license check/license assignment is performed.

You can of course also govern access using NTFS rights.

My 2cts: use "Allow Dynamic CAL Assignment" only if you have either many more licenses than people with access to your network, or if you have a secondary mechanism that controls access to your documents.

Peter

View solution in original post

5 Replies
krishnacbe
Partner - Specialist III
Partner - Specialist III

Hi,

Check whether "Allow Dynamic CAL Assignment" is enabled. This will automatically increase the License count.

Not applicable
Author

Hi,

Thanks for your comments!

Yes ,"Allow Dynamic CAL Assignment" is enabled but I have a question here. The term means that an user will be allocated a license automatically if there is a license not in use at that particular moment.

In such a scenario what is the significance of assigning a license manually if anyone can be assigned a named cal dynamically?  If I need to restrict an user from accessing a document then also dynamically the user will be assigned a license if there are any free licenses ?


Secondly, it will also help us to assign licenses to users more than the number of available licenses but at a time the number of users using it can be maximum equal to no.of licenses right?

Anonymous
Not applicable
Author

Hi There,

If you want to restrict a user from accessing a document, you can create security at script level(Section Access). Also if DMS authorization is enable, user will not be able to access or view the document at accesspoint unless you have granted access explicitly under user documents.(I am assuming that by accessing the document, you mean to say access the document at qlikview accesspoint.)

I don't think it will also help us to assign licenses to users more than the number of available licenses. Need to check this.

Regards

Bibhu Sharma

Peter_Cammaert
Partner - Champion III
Partner - Champion III

The theory is like this (if you read your license agreement): licenses can be assigned to a user and should stay assigned to that user except if the user leaves your company or changes roles/assignments.

When you apply this rule, you will see that it isn't in the interest of manageability and access control to automatically assign licenses to anyone who (accidentally) visits the AccessPoint, without additional safeguards. Because that is how "Allow Dynamic CAL assignment" works: anyone who visits the AccessPoint and clicks a QlikView document will get a Named CAL assigned to his/her Windows account.

You can control access to QlikView documents by either manually assigning CALs (especially Document CALs -> No CAL = No entry to this document), or by implementing a second access control management system (like Section Access) to block people from entering off-limits documents and getting a CAL assigned that they shouldn't have. The second technique works because Section Access ACLs are checked before a license check/license assignment is performed.

You can of course also govern access using NTFS rights.

My 2cts: use "Allow Dynamic CAL Assignment" only if you have either many more licenses than people with access to your network, or if you have a secondary mechanism that controls access to your documents.

Peter

krishnacbe
Partner - Specialist III
Partner - Specialist III

Hi,

I agree with Peter. If you have more named CALS you can use Allow Dynamic CALs option else you can maintain the CAL assignment manually.