Security rules for streams

[DostonbekYusupov]

Good day, Dear Community!

I was going to know if there any possibilities to create such a rule where - only certain users with certain environment.IPs could access to particular streams in Qlik Sense

I have tried the method below, so far no success:

Ex:

(user.name="user_01" and user.environment.ip="123.123.123.123")

or

(user.name="user_01" and user.environment.ip="123.123.123.456")

And if there is someone who is trying to access "user01" by using IP: 123.123.123.789  then he should not get access to the stream 

P.S. This is the case where one Qlik analyzer account is shared among multiple users in an organization. 

[Maria_Halley]

@DostonbekYusupov

For this to work the following requirement need to be met: 
Activate the < Extended Security Environment > in your Virtual Proxy configuration (Advanced section)
This rule will not apply to RootAdmin users.

[DostonbekYusupov]

Hi there! Maria

Thank you for your reply, but it did not work 

[Maria_Halley]

@DostonbekYusupov

Do you get access where you shouldn't have it, or do you not get access even if you should? Also what version of QlikSense is this?

It is important to keep in mind that you cannot restrict access with a rule. If there is another rule giving access, then you will still get access.

Go to the rule and click on Security rules, under associated items, to see all rules affecting this stream.

If you don't get access where you should, then try to use the IPv6 address

[Maria_Halley]

@DostonbekYusupov 

Are you by any chance using a reverse proxy?

[Maria_Halley · Accepted solution]

@DostonbekYusupov 

I tested with *.123.123.123 instead (but my IP of course). I changed the "=" to "like" and then it worked

[rohitk1609]

(user.name="user_01" and user.environment.ip like "*.123.123.123")

This one is working?