5 Replies Latest reply: Jun 1, 2016 1:50 PM by Mark Ritter RSS

    section access

    Prasanta Kumar

      Hi All,

       

      I am not managing my users in any database. It is based on AD groups NTNAME.

       

      My issue is everytime a new user added into NT AD group, i have to update my section access table for that user.

       

      Which i dont want as its a manual work everytime.

       

      So is it possible to do section access based on AD groups only without mentioning the userid in section access table.

       

       

      ACCESSUSERIDGROUPOMIT
      USERgal\PrasantaQLIKAMGPrice
      USERgal\SachinQLIKAMGDisc
      USERgal\KumarQLIKGEN

       

       

      Regards,

      Prasanta

        • Re: section access
          Mark Ritter

          I don't know if this will help.  I am not using AD.

           

          But I created an extract and associated task that creates or updates a QVD with the user information that I am using for my Section Access each night.  I am building this from a table in my application of system users.

           

          So I do not have to manually do anything when a user is added or removed from the application.

           

          I am assuming that something like this could also be done with AD.

            • Re: section access
              Prasanta Kumar

              Hi Mark,

               

              thanks, this sounds like helpful in my case as well.

              Would you mind to share a sample of your setting,

               

              thanks in advance

                • Re: section access
                  Mark Ritter

                  So here is the code from the extract.  I have to massage the data to put it in the form that Qlik Sense is expecting.

                   

                  UserAuthorization:

                  select  'USER' AS ACCESS,'WIN-IVTIROI5TAF\'+ulp.userid AS USERID, c.customerid AS CUSTOMERID

                  from

                  UserLocPermission ulp

                   

                  I then store the output into a QVD

                   

                  Then in the Section Access part of the dashboard script I have the following:

                  LOAD

                       "ACCESS",

                       "USERID",

                       CUSTOMERID

                  FROM [lib://QVD Files (win-ivtiroi5taf_mritter)/USERAUTHORIZATION.QVD]

                  (qvd) Where 1=1;

                   

                  When I load the actual data I have a field named CUSTOMERID that it is matching against the data in the QVD to limit access.

                   

                  Hope that makes sense.  I had to play around with this quite a bit to get it to work.  You must have the Where 1=1 in the Load statement.  I found that in another post here in the Community.