Section and Stream access based on AD group

[chandrasjr1]

Hi All,

Currently we are controlling Stream through UDC and section access through custom table. But we want to explore if AD groups can be used for this. 

We have multiple streams and apps. For simplicity lets say, users can use all apps within the stream and I want to provide different set of user access for each stream & section. 

Stream 1: Contains App1 --> I want to control access using ADGroup1

Stream 2: Contains App2 --> I want to control access using ADGroup2

Stream 3: Contains App3 --> I want to control access using ADGroup3

Can I import AdGroup1,AdGroup2 and AdGroup3 ? Is it through QMC-->UDC-->Create New-->Active Direction?

Also if User1 present in both AdGroup1 and AdGroup2 , will this cause duplicate user in Qlik or User1 will be only one but be associated with two groups AdGroup1 and AdGroup2?

Also I want update section access to refer ADGroups. E.g. App1 should have section access for those who are present in AdGroup1. I believe this can be done with sectionAccess code and I need to use the group name in the section access part.  Below is the sample code I got from Qlik site. Is this the one do I need to use?

Section Access; LOAD * inline [

ACCESS, USERID, GROUP, REDUCTION

USER, *, ADGroup1, *,

];

[Chanty4u]

Try this 

To use AD groups in section access, you can specify the AD group name in the "GROUP" field. Here is an example:

Section Access;

LOAD * INLINE [

ACCESS, USERID, GROUP

USER, DOMAIN\User1, ADGroup1

USER, DOMAIN\User2, ADGroup2

];