Qlik Community

QlikView Publisher

Discussion Board for collaboration on QlikView Publisher.

Not applicable

Active Directory/Section Access Alternative

Hi,

I'm trying to find an alternative for the Active Directory/Section Access security in QlikView.

In the QV Management Console, we have to manually add a user to the distribution list. We're trying to find a way, that we put all the users in an Excel file and than use that list in the manual distribution.

I know I can use Active Directory groups, but since I'm working for a big client, it takes a couple of week for the helpdesk to create a new group, or to add someone to a group (for access). So, we're trying to put an excel file somewhere on a sharepoint server, and use that Excel file as an 'Active Directory group' (to speed things up).

Is something like this possible?

8 Replies
bbi_mba_76
Valued Contributor

Re: Active Directory/Section Access Alternative

Hi,

you could use section access with only access and ntname read from the excel.

In this doc inline tables are used, you could replace with excel source.

Introduction to Section Access

morris70
Valued Contributor

Re: Active Directory/Section Access Alternative

Hi,

You could use Configurable ODBC (Directory Services) and create a connection to a database (SQL, Access or whatever) or I guess even an excel file.

You could also create and use the local directory on the server.

I understand your problem but It would still be best if you could work out a process and use the AD.

Skärmklipp.PNG.png

Not applicable

Re: Active Directory/Section Access Alternative

Hi,

we don't use Section Access in any of our applications (it was a decision made by my client). Since we have a lot of applications running, it would take too much time to adjust all applications.

We're using the Active Directory groups at the moment, but this means, that if we get a new request for access, we have to contact the help desk to add this new user to the group (and because of administrative formalities, this usually takes a week or 2). So that's why we were searching for a way to replace this Active Directory group by an Excel file (so owners of the application can add/delete users themselves), but without using the Section Access way, because this would mean that we have to adjust all existing applications (and we don't have the time for that).

Employee
Employee

Re: Active Directory/Section Access Alternative

Hi Nils,

Yes, you could use the Configurable ODBC, but with that and anything that isn't Windows base, you will have to write your own SSO page and pass the header information to QlikView.

Bill

morris70
Valued Contributor

Re: Active Directory/Section Access Alternative

Hi Bill,

But in this case I am guessing that it is windows based and if so this should not cause any problem and should work or am I missing something?

Not applicable

Re: Active Directory/Section Access Alternative

it's windows based, but the perfect solution would be, that we can choose between either AD groups or Excel sheets (that contains the names of the users) for distribution

Employee
Employee

Re: Active Directory/Section Access Alternative

Hi,

You are confusing Authenication with Authorization. Windows does the Authenication and once you are authenicated this is passed to QV to see what you have rights to. So, you might be able to get by with this if you are running in DMS mode.

Check out the below link if you have not seen it.

Authentication and Authorization

Bill

morris70
Valued Contributor

Re: Active Directory/Section Access Alternative

Hi Bill,

Yes I know the difference, the Authentication will have to be solved with some form of sign on but I can't really see how to solve the problem any other way?

Community Browser