9 Replies Latest reply: Apr 19, 2018 6:36 AM by Ashik Khan RSS

    How to segregate access for APPs.

    Ashik Khan

      Hi Experts,

       

      I have an APP published in one Stream, and the same stream has other different Apps. I need to know how can i segregate access for APPs for two different users.

       

      Example:

      Stream              Apps

      Sales               Daily Sales

                              Monthly Sales

                              Revenue

       

      In the above example, Revenue has to be shared with 2 different users.

       

      Thanks,

      MAK.

        • Re: How to segregate access for APPs.
          Jerry Ogwa

          Hi Khan,

           

          You can set up a security rule on QMC that would restrict access to apps. You assign read access of the app  to users whom you want to grant access to the app.  You can read about Security Rule https://help.qlik.com/en-US/sense/February2018/Subsystems/ManagementConsole/Content/preinstalled-QMC-security-rules.htm

           

          Hope this would assist you

            • Re: How to segregate access for APPs.
              Ashik Khan

              Hi Jerry,

               

              Thanks for your quick reply,  i have gone through the link but i got lost...

               

              Can you please share any simple example so that i can try the same...

               

              Thanks,

              MAK.

                • Re: How to segregate access for APPs.
                  Jerry Ogwa

                  I don't have access to Security Rule interface to give you the exact window, however, the following steps should guide you.

                   

                   

                  Step one: Custom Property

                  1. Go to custom property and create new custom property with Name of your choice eg AppUserGroup

                  2. Check the USER box

                  3. Under VALUES enter NonRevenue - You can add multiple revenues but for now one could be fine.

                  4. Create button

                   

                   

                  Step two: Security Rule

                  1. Go to Security rule and create a security rule to restrict users access to Revenue App

                  2. Under Name, you may give it Revenue App Restriction

                  3. Under Resources Filter : Select App

                  4. under Action, check Read or other actions as applicable

                  5. Under condition, make sure this conditions are applied

                       a. App is equal to 'Revenue' (the name of the app you want to restrict)

                       b.  @AppUserGroup is not equal to 'NonRevenue'

                  6. Set Context to both QMC and Hub

                   

                   

                  Step Three: Assigning users to group

                  1. Select user that you don't want to have access to Revenue App

                  2. Under custom Property, select NonRevenue as AppUserGroup

                   

                   

                  Hope this could be of help.

                   

                   

                  Thanks

                    • Re: How to segregate access for APPs.
                      Ashik Khan

                      Hi Jerry,

                       

                      The above steps which you have provided are very helpful, and i was able to follow all the steps but still its same, it seems like the security rules are not working...


                      below is the condition i have applied:

                      ((resource.name="Revenue" and resource.owner.@Test_Apps!="Sales"))


                      Thanks,

                      MAK.

                        • Re: How to segregate access for APPs.
                          Jerry Ogwa

                          user.@Test_Apps!="Sales" 

                          I assumed you followed the steps above although the naming is not the same


                            • Re: How to segregate access for APPs.
                              Ashik Khan

                              Hi,

                               

                              I have tried that too earlier, but result is same...

                               

                              Thanks,

                              MAK.

                                • Re: How to segregate access for APPs.
                                  Jerry Ogwa

                                  It is difficult for me to guide you without having access to the QMC. I can't say what is exactly broken. But perform  this check.

                                   

                                  1. Is Test_App a custom property for Apps or Users?

                                  2. Did the App name popped  up or you typed it? It should pop up
                                  3. You may include app object under resources filter like this:
                                       Resources Filter: App_*, App.Object_*

                                  4. You can do this test under the condition:
                                      Resource.Name!="<Name of your app>" AND User.name ="<Select your Name here>"

                                   

                                   

                                  Check if you have access to the app

                                    • Re: How to segregate access for APPs.
                                      Ashik Khan

                                      Hi Jerry,

                                       

                                      1. Is Test_App a custom property for Apps or Users?  - Its Custom Property Name

                                      2. Did the App name popped  up or you typed it? It should pop up - I think i have typed

                                      ---------------------------------------------------------------------------------------------------------------------------------

                                      Hard luck, even tried below no result...

                                      3. You may include app object under resources filter like this:
                                          Resources Filter: App_*, App.Object_*

                                      4. You can do this test under the condition:
                                          Resource.Name!="<Name of your app>" AND User.name ="<Select your Name here>"

                                       

                                      Thanks,

                                      MAK.

                        • Re: How to segregate access for APPs.
                          Ashik Khan

                          I am still waiting for experts to assist me in achieving / solving this questions...