Suggest an Idea

[Ken_T]

This is to request ability to assign a user to have QMC access via security rule, without needing to assign the user a ROLE.

Currently, a role is required to grant access to the QMC, and then security rules adjust the things that the user can do.  It would be good to be able to do it all in security rules, so that the role is not needed.

[Oliver_F]

Hi,

If I understand your request correctly, then this is already possible. You can grant a user access to the QMC without assigning a system role.

You can do this by granting him access to the different Sections in the QMC or builing more general rules.

Please see

https://support.qlik.com/articles/000044169

and

https://help.qlik.com/en-US/sense-admin/November2020/Subsystems/DeployAdministerQSE/Content/Sense_De...

[Levi_Turner]

Quite right, @Oliver_F .

@Ken_T : Taking the ContentAdmin role:

Just create new rules which provide the same resource filters, actions and adjust the condition(s) to something more desirable, like user.group = "Qlik Admins" or your chosen group attribute.

Ultimately there's nothing special about roles other than being Qlik Sense native entities which allow for delegation. If you have attributes from a User Directory like AD, just use those attributes directly and do away with the roles.