How to implement section access in Qliksense App

[hassansm]

Hi,

Can you please share the step by step information for implementing section access control in Qliksense app. i have the following table and scenario.

I want COO and Finance Department person to access all the division data, however for production and commercial department should have access to only their division data.

Division Div_id Code Name 1 P Production 2 F Finance 3 C Commercial

Fact table

Trn _id	Div_Id	Value
11	1	1000
12	1	4000
13	2	6000
14	3	5000
15	3	4000

It would be great help, if you can share the information.

Thanks,

Hassan

[DavidŠtorek]

Hi,

use it as following

On very beginning of script place this

    section access;

LOAD * inline [
ACCESS, USERID,Div_id
ADMIN, AD_DOMAIN\COO,*
ADMIN, AD_DOMAIN\FinanceUser1,*
USER, AD_DOMAIN\ProductinUser1,1
USER, AD_DOMAIN\CommercialUser1, 3
ADMIN, INTERNAL\SA_SCHEDULER,*
];

section application;

All your tables go here.

If you want to manage section acces by external e.g. excel spreadsheet you can use it instead of inline tale.

Hope it is clear

[DavidŠtorek]

Or see How to apply user specific security in Qlik Sense?

[agigliotti]

you can use the below script;

SECTION ACCESS;

TEST:

LOAD *

INLINE [

ACCESS, USERID,                         SA_DIV

USER, AD_DOMAIN\COO, ALLVALUES

USER, AD_DOMAIN\FinanceUser1, ALLVALUES

USER, AD_DOMAIN\ProductinUser1,1

USER, AD_DOMAIN\CommercialUser1, 3

ADMIN, INTERNAL\SA_SCHEDULER,*

];

SECTION APPLICATION;

STAR IS '*';

tab1:

load

     SA_DIV,

     SA_DIV as DIV

resident TEST where SA_DIV <> 'ALLVALUES';

concatenate

load

     SA_DIV,

     '*' as DIV

resident TEST where SA_DIV = 'ALLVALUES';

STAR IS;

//where DIV is your data model field in section application for data reduction.

Hope it helps.

[hassansm]

Hi,

Thanks for your solution, i will apply your suggestion and test.

I have one more query,let say i want to give "CommercialUser1" access to production and commercial division data.in this case do i need to write the script as below.

section access;

LOAD * inline [

ACCESS, USERID,Div_id

ADMIN, AD_DOMAIN\COO,*

ADMIN, AD_DOMAIN\FinanceUser1,*

USER, AD_DOMAIN\ProductinUser1,1

USER, AD_DOMAIN\CommercialUser1, 1

USER, AD_DOMAIN\CommercialUser1, 3

ADMIN, INTERNAL\SA_SCHEDULER,*

];

[hassansm]

Hi,

Can you please clarify the following from your scripts.

Why you are using ALLVALUES in SA_DIV column, my division master table doesn't have ALLVALUES

[arvind1494]

SECTION ACCESS;

TEST:

LOAD *

INLINE [

ACCESS, USERID,                         SA_DIV

USER, AD_DOMAIN\COO, ALLVALUES

USER, AD_DOMAIN\FinanceUser1, ALLVALUES

USER, AD_DOMAIN\ProductinUser1,1

USER, AD_DOMAIN\CommercialUser1, 3

ADMIN, INTERNAL\SA_SCHEDULER,*

];

SECTION APPLICATION;

[agigliotti]

ALLVALUES means you see all data.

[DavidŠtorek]

Hi,

exactly like this