Restricting user access per sheet level

[TingtingLiu]

I'm trying to restrict the user access to specific sheets, and I tried to create the security rule like the screenshot shows, but it doesn't work.

And I also tried to following the instruction from Sheet or App Object Level Security Qlik Sense - Qlik Community - 1485114, but it also not works.

Is there any suggestion can be provided to get it done? Thank you.

[Gui_Approbato]

I use Inphinity in my customers to manage it from inside the app (see below), so admins can allow other users and also control section access from it.

If you're interested let me know (I work for Inphinity). Find me on linkedin: Guilherme Approbato

[TingtingLiu]

Now the user can see the Stream, and all the apps in this stream, but actrually only one App with the custom property "AppLevel", the expected result should be only one App can be see by this user.

[BIAKS]

This means that there is another rule for app access, you can find it in app properties like below:

If you disable that rule, the user should only see 1 app

[TingtingLiu]

Thank you, now only one App shows to the user. 

But there is no sheet avaliable when the user open the app. I believe a SheetLevel property and security rule need to be created. My questions are:

1. Which resource types should be choose? there is no App.Object or sheet.

2. How the custom properties can be added to each sheet which the user requires access to?

[BIAKS]

You can use app_object.name for sheets and use exact sheet name for custom properties. For example, if you have a sheet named 'Dashboard' in the app 'Finance', create a sheetlevel custom property like 'Dashboard' and give that to user. You can reference below rule:

or if you have multiple sheets with the same name you can use description field like below:

[TingtingLiu]

I'm trying to follow the steps that you suggested, but the user still not able to see the sheet, please see below sample, is there anything I missed?

[BIAKS]

If you use description in the rule, you should write you custom property into the description field of that sheet:

[TingtingLiu]

I tried to add the description to sheet, but it's not working. And I also tried the other suggestion that you provided:

 1. use the resource.name = user.@Sheet_Level, also change the custom property for user to match it.

2. make the Sheet level value same as App_level and use "Or resource.app.@App_Level = user.@Sheet_Level "

But all of them cannot work to make the sheets show up, so I'm wondering if I did anything wrong.

[BIAKS]

can you show your sheet's user access matrix and associated rules?

[BIAKS · Accepted solution]

I am using these 3 rules for access management, the company doesn't require sheet level access so I give them access to all sheets if they see the app:

Stream Level:

App level:

Sheet Level:

Example User:

Example app: