How to Allocate and Deallocate Licenses using AD Groups?

[iLoveDataVis]

Hi all,

How to Allocate and Deallocate Licenses using AD Groups?

We want to manage user access by allocating and deallocating licenses when a user is added to an AD Group and remove license when a user is removed from the AD Group.

Anybody know what code is required to make this possible?

My understanding is the User Directory Connector will need something, and a security rule in the License Management page of the QMC but don't know how to write the code.

Any help please?

[Andrew_Delaney]

The inbuilt license rules can only allocate, they cannot deallocate.

This means you are going to need to investigate using Qlik-CLI or the api to build your own system for this purpose.

[iLoveDataVis]

Hi @Andrew_Delaney 

Couple of questions for you:

Thank you, so what would the rule for allocating licenses based look like? I want to test it to see if it works with a small group of users. If you can provide an example for the User Directory LDAP filter to capture the group, and then to allocate licenses rule that would be great.

Is the Qlik-CLI for both or simply to achieve deallocating licenses?

[rohitk1609]

Hi ,

you should try, Go to License=> Create a new Login Access Rule, Give it a name and few token as per need=> Create login rule with either user directory or user.group whichever fits to your AD. whenever any user will come he or she will get Login pass 

If you want to grant Token then you can do the same thing with User Access Rule.

Thanks,

Rohit