How to setup Active Directory Security groups for Admin Roles in QlikSense

[Anonymous]

Hi all,

I've just started as a Qlik Administrator for my business unit, I've been brought in with previous experience with AD and other Microsoft Systems. My question is, can Active Directory be integrated with QlikSense in a way that I can use AD Security groups to manage stream/ rights access?

An example of what I'd like:

Security group 'STREAM1-Access' contains user: 'User1'

Can I set-up a user connector so that It sync with 'STREAM1-Access' and automatically assign the 'Admin Role' to the user?

[Anonymous]

Hi Kyle - You will have to do some setup around the 'Custom Properties' (Setting up advanced security rules - Qlik Sense - YouTube) within Qlik to do what you are asking about.  We have a similar setup where we are using the AD groups to assign application level (Qlik) permissions as well as permissions to various Qlik apps.  You cannot bring AD groups in to the Qlik environment but the users you sync up using the AD connector will have their group memberships.  You can setup security rules using the built-in user properties along with the custom properties.

Example: ((user.group=resource.@Positions and user.group=resource.@Area and user.group=resource.@Streams))

This would provide read access to applications where the AD group membership of a user matches the assigned custom property of the application.

Hope this helps.

Pranav

[tomovangel]

Hello, I have some experience with writing security rules, but I don't know if the following is possible:

Can I write security rule, which is going to serve as Section access, for example :
If an user is part of the group CountriesEU, dimension(countrieseu)='EU'

And thus, when a user logs in the application, he will be able to see only information pertaining to EU countries. ?

BR, Angel