Managing access to apps with section access in SaaS

[laurafinn]

Hi all,

The scenario for our organisation is this:

We'd like to have one managed space that all apps are published to for ease.  We'd then like to restrict which users can open which app at an app level.  Section Access seems to be the best option here, however I can's seem to get what looks to be simple code to work!  What am I missing? Below is the code:

Section Access;
LOAD * inline [
ACCESS, USERID
ADMIN, INTERNAL\SA_SCHEDULER
ADMIN, o5G2wyXKLWeYQHRej1TUyRWVC2ZwQHTT_aFSr_Axug4
ADMIN, Mfz7vYE18_tcnMC0nZZDdaj2mOIxW2Ki
];

Section Application;

Notes:

-I do not want to restrict any data to the user 

-The user is able to open the same dashboard in the space where no Sections access code is entered

-When trying to open the same dashboard with Section Access code in the script the user does not get an error, the dashboard appears to be loading but never actually does

[Joseph_Musekura]

Hi @laurafinn ,
The following works for me. I did some fields reduction as well.
For " userID" you need to use the value of  "IDP Subject". You can remove the internal\SA_scheduler 
The ADMIN is the "IDP Subject" of admin in my tenant.

Load * INLINE [
ACCESS, USERID, USER.EMAIL, REDUCTION
ADMIN, bbP19fQXlNU9m2h_7JBAWRXiDGa3FhMNYvppP8nndfs, ab.xxxx@gmail.com,
USER, nh6cnjLZ19m170XQkVSo-6dZc_yretvRW68LtzXYsPY, cd.xxxxx@gmail.com, 1
USER, nh6cnjLZ19m170XQkVSo-6dZc_yretvRW68LtzXYsPY, db.xxxx@gmail.com, 5

];
regards,

[laurafinn]

Thanks Joseph, apologies for the delayed response, I've been out of office.  I've still not managed to get this working but I've got a couple of other avenues to explore next - wish me luck!