Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

Announcements

Breathe easy -- you now have more time to plan your next steps with Qlik!
QlikView 11.2 Extended Support is now valid through December 31, 2020. Click here for more information.

jandelaet
New Contributor

Section Access Multiple AD Groups

Hi there,

I'm facing a problem with section access and AD Groups.

I Have a user who is known in 2 different AD Groups : For Example GROUP1 and GROUP2.

My section access table is as follows

 

NTNAMEACCESSOMIT
GROUP1USERField 1
GROUP1USERField 2
GROUP2USER

For a user who is only known in GROUP1, Field1 and Field2 are omitted, as expected.

For a user who is only known in GROUP2, no fields are omitted, as expected.

But if a user is known in both AD Groups, then also Field1 and Field2 are omitted.

In this case I would expect Qlikview to use the most wide group and not omit any field.

Is there a way to achieve that ?

Thanks a lot !!

2 Replies
MVP & Luminary
MVP & Luminary

Re: Section Access Multiple AD Groups

In Qlikview the most restrictive rules will be applied. If one rule denies access then no other rule can grant it. The only way I see around this is to remove your example user from GROUP1. Or create a GROUP3 and, your user to that group only and add rules specific for that group to you section access table.


talk is cheap, supply exceeds demand
jandelaet
New Contributor

Re: Section Access Multiple AD Groups

Thanks a lot for the information Gysbert !