Hi Alexandra - Have you thought about using custom properties (https://help.qlik.com/en-US/sense/June2017/Subsystems/ManagementConsole/Content/custom-properties-overview.htm)? They can be really powerful when applying object level security within Qlik for a user or a group of users.
I am already using CustomProperties in my experiments.
I got the Import button available, so I will post here my results so that others might use it:
I followed the steps from this example: Security rules example: Recreating document admin by creating QMC app admin ‒ Qlik Sense, and the Import button was not visible for an AppAdmin user, until I deleted the condition user.userDirectory="QVNCycles". I couldn't explain exactly this behavior, as other actions on Apps were active in the QMC interface.
Anyway it was not correct to use the condition in my case, as the users are of local Windows kind, so this was not their user directory. In fact, I'm not sure why it worked at all. Does anyone know where I can find more info to read about this QVNCycles user directory?
Thanks in advance.