Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

Announcements
QlikView Fans! We’d love to hear from you.
Share your QlikView feedback with the product team… Click here to participate in our 5-minute survey.
Rules, plus terms and conditions, can be found here.
kbiesemans
New Contributor

How to avoid that the technical user account has access to all the data?

This week I heard an interesting question at one of our customers. They were afraid to use the Publisher to extract data and save it into QVDs. The reason is that the Publisher got executed by a technical user account which will get access to all the extracted data, so all the data of that company. A technical user account is not linked to a physical person. So if someone can find the password of that technical user account, they gain access to all the sensitive data. And you can't make someone responsible for losing the password.

What they would like to acheive is that one user is responsible for one domain, e.g. HR, Marketing, Finance,... Does someone see a solution for this?

5 Replies

Re: How to avoid that the technical user account has access to all the data?

HI,

You can Schedule Task via QlikView server and if required give remote access to QEMC.

Regards

ASHFAQ

senarath
Contributor III

Re: How to avoid that the technical user account has access to all the data?

Hi,

what about limit the folder access user wise.This would be the windows user either domain or local.

Thanx

Not applicable

Re: How to avoid that the technical user account has access to all the data?

The issue is that to load the Data the User need the Access Rights. If you want to ensure nobod can use this account the best is to use a non interactive Service User.

senarath
Contributor III

Re: How to avoid that the technical user account has access to all the data?

What if the case if we put QVD makers into a folder and block other folders.

Further, if the version is publisher, we could use QMC to run scripts as well in which case only remote log on to QMC would do the job.

Employee
Employee

Re: How to avoid that the technical user account has access to all the data?

Hi,

The attached document should help and give you an understanding of ways to lock down QVS and publisher. It is a little old, but the fundamentals are the same.

Community Browser