Complex Security problem

[tomovangel]

  Hello, dear Qlikers !

     Hadn't posted discussions in quite a while, but I got my self into a Project, where the Security of my clients is really complex.

So I am looking for ways to Copy the security of my client's database, into Qlik Sense.

So basically they have around 100 users from different parts of the world.

The security in the Database is based on the columns from the DB named:
Segment,(with 2 values inside) - dimension

Region( with 12 values inside) -  dimension

Country( with 7 values inside) - dimension

Sales Amount - this is an expression

Cost of Goods Sold  - expression

Margin - Expression

Intercompany transactions- dimension

So at the end i got 8 columns on which I have to reduce data on.

So my Question is, how to proceed.

My client wants to use AD groups for the security, and He told me that they can make Any group I want into the AD.

My client needs me to tell him what Groups I want from him to create into the AD, so we can use them into Qlik sense

And I also have no idea, how to use AD groups to reduce data in Qlik Sense.

Any Advices on how to proceed with this project will be highly appreciated.

I have Knowledge on Security rules( I have used them in the past by allocating custom properties to users and to streams/apps/sheets)

I also have knowledge on Section Access ( I have used it in 5 of my projects before, where I had to cut data on 3 different dimensions)

So Please, If Any of you has made Complex Security Reductions in Qlik Sense, please help, because I am lost...

I can attach files for testing if somebody has any idea how to do it 😉

Thanks in advance for your time

[marcus_sommer]

It should look like:

Section Access;

star is *;

SectionAccessRegion:

LOAD upper(ACCESS) as ACCESS,

     upper(NTNAME) as NTNAME,

     upper(REGION) as __REGION

FROM [$(pInc@SA)SectionAccessRules.xlsx] ($(typXLSX) Region);

SECTION Application;

- Marcus

[tomovangel]

Okay, but I see that you are using .xlsx file, is this a file made by you, or It's dynamic and if somebody makes changes in the AD, it will reflect in the .xlsx file?

[marcus_sommer]

Yes it's a static excel because we use DMS with custom users as authentication mode (the custom users/usergroups will be handled like NT users so that's the same from a section access point of view) and we have not often changes to them (mayby ones a year) because we use functional users like Region1, Region2 instead of personalized users.

Whereby the import point was here the structure of the load and not the source of the data. You need just to change the excel with the results of your queries on the active directory. I think the following will be quite helpful for it: Section Access (Data Reduction) using Active Directory.

- Marcus