Thanks for your comments!
Yes ,"Allow Dynamic CAL Assignment" is enabled but I have a question here. The term means that an user will be allocated a license automatically if there is a license not in use at that particular moment.
In such a scenario what is the significance of assigning a license manually if anyone can be assigned a named cal dynamically? If I need to restrict an user from accessing a document then also dynamically the user will be assigned a license if there are any free licenses ?
Secondly, it will also help us to assign licenses to users more than the number of available licenses but at a time the number of users using it can be maximum equal to no.of licenses right?
If you want to restrict a user from accessing a document, you can create security at script level(Section Access). Also if DMS authorization is enable, user will not be able to access or view the document at accesspoint unless you have granted access explicitly under user documents.(I am assuming that by accessing the document, you mean to say access the document at qlikview accesspoint.)
I don't think it will also help us to assign licenses to users more than the number of available licenses. Need to check this.
The theory is like this (if you read your license agreement): licenses can be assigned to a user and should stay assigned to that user except if the user leaves your company or changes roles/assignments.
When you apply this rule, you will see that it isn't in the interest of manageability and access control to automatically assign licenses to anyone who (accidentally) visits the AccessPoint, without additional safeguards. Because that is how "Allow Dynamic CAL assignment" works: anyone who visits the AccessPoint and clicks a QlikView document will get a Named CAL assigned to his/her Windows account.
You can control access to QlikView documents by either manually assigning CALs (especially Document CALs -> No CAL = No entry to this document), or by implementing a second access control management system (like Section Access) to block people from entering off-limits documents and getting a CAL assigned that they shouldn't have. The second technique works because Section Access ACLs are checked before a license check/license assignment is performed.
You can of course also govern access using NTFS rights.
My 2cts: use "Allow Dynamic CAL Assignment" only if you have either many more licenses than people with access to your network, or if you have a secondary mechanism that controls access to your documents.