Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

Announcements

Breathe easy -- you now have more time to plan your next steps with Qlik!
QlikView 11.2 Extended Support is now valid through December 31, 2020. Click here for more information.

Not applicable

Using security groups with both section access and AccessPoint

Hello all,


I’m working on a dashboard that has security that’s a little more complex than what I’ve worked on before. 

·        I need to provide the Security_Group_Admins security group with access to the QVW

·        I need to provide both the Security_Group_Admins AND the Security_Group_Users security groups with viewing privileges in AccessPoint.

·        There is  no data reduction needed for the dashboard/users


My section access code looks like the following:

Section Access;
load * inline [
        ACCESS, %FLAG_ADMIN, NTNAME, %SECROLE, %SECGEO
        ADMIN, Y, BIPUBLISHER

        ADMIN, Y, SVC_S_BIPUBLISHER

        ADMIN, Y, T_DEVELOPER
        ADMIN, Y, SECURITY_GROUP_ADMINS
        USER, N, SECURITY_GROUP_USERS]
;


In the QMC, when I set up a task, I'm including both the Security_Group_Admins AND the Security_Group_Users as Named Users, on the Distribute tab. 


Upon testing, someone in the Security_Group_Users is not able to see the dashboard in AccessPoint.  I am "T_DEVELOPER" above, and I can see the dashboard in AccessPoint, as well as open the QVW file.  What is the proper way to set up both section access and the server so that the groups listed above have permission to do the right things (as noted above)?


Thanks very much!


Robin

4 Replies
MVP & Luminary
MVP & Luminary

Re: Using security groups with both section access and AccessPoint

Do the two AD groups also have read access to the folder that contains the .qvw qlikview files? If not, the members of these groups will not see the documents in the access point.


talk is cheap, supply exceeds demand
Not applicable

Re: Using security groups with both section access and AccessPoint

The Admins group has read and write access to the folder with the QVW files - that's the way we would like them to open QVWs.  The User group does not, because of course we don't want them to have access to the files.

Are you sure that the users would also need to have access to the folder where the QVW lives in order to see the dashboard in AccessPoint?  That hasn't been done with other dashboards that work properly - maybe there's something I don't understand about this scenario?

MVP & Luminary
MVP & Luminary

Re: Using security groups with both section access and AccessPoint

If you're sure that the other documents don't have any read access grants for user or user groups then check the setting of the Filter Access Point Document List Based on Section Access option on the Server tab of the Document Properties window. Is it enabled in these documents and not in your other qlikview document?


talk is cheap, supply exceeds demand
Employee
Employee

Re: Using security groups with both section access and AccessPoint

Hi,

You can always check the in effective permissions on the file to see if the user has access to it.

View effective permissions on files and folders: User Rights; Security Policy

Bill

Bill - Designated Support Engineer at Qlik
If a post helps to resolve your issue, please mark the appropriate replies as CORRECT.