I'm not entirely sure that I understand your explanation, but here is what I can add to clarify things a bit:
There are two things that need to be configured before an AccessPoint visitor can open a document:
- A license has to be assigned to this user. A Doc CAL or a Named CAL will do. No need to assign both.
- Access has to be granted to this document. That's Authorization (nothing to do with licenses)
The last one depends on whether you are using a Publisher or not. With a Publisher, you are able to distribute after a reload. When distributing, you can grant specific users access to a document. Others that have been assigned a license, even a Named CAL will not be able to see or open that document if they are not properly authorized.
QlikView will not freely choose what to use or assign. That happens more or less in a specific order:
- First the user is authenticated. Now QVS at least knows his/her ID.
- Then QVS looks for a license that matches the ID. ("Dynamice CAL assign." makes this very complex)
- Then QVS checks authorizations.
In case you're not sure about this Dynamic CAL assignment or what comes first, read section 15.4 Combining Different CALs in the Server Reference Manual. It's short and IMHO very clear.
Thanks for the detailed reply. I'd like to provide screenshots of what I am doing and I am hoping you can confirm or deny that it is being done correctly.
Step 1: Under User Documents > Document CALs, I simply assign myself a Document CAL (i do not want to utilize a Named User License for myself)
Step 2: Per your instructions, authorization has nothing to do with licenses. Thus, I assign myself as a Named User with authorization to this same document.
Step 3: We shift over to Source Documents and create our reload task. Note, that the way this was set up, there are nothing but reload tasks here for all documents. There is ZERO distribution of users performed here. The big area circled red is blank and may or may not be an issue given what I am trying to do.
So at the end of the day, all users can see and access qlikview because we currently have them all listed as authorized Named Users.
My question is... what if I authorized a 2nd user, BOB, to this Document A, but did NOT add him to the Document CAL section where I listed only myself? (only added him to the authorized users...so now we have 2 authorized users and only 1 Document CAL assigned) How does Qlikview know to say "Ok, I want to utilize a Document CAL to James Johnston, but I want to utilize a Named User License to Bob." And where on QMC can I see a clean statistics list of which users are utilizing Document CALS and which are utilizing named licenses?
If this is still confusing, then I give up
Allow me to improve a bit on my previous explanation. If I do it right, you'll be able to answer your last question yourself. Otherwise, it's still at the end of this reply
Let's compare QlikView to a library. In this library you need Licenses to get in, and authorizations to grab a book from a shelf and open it. A CAL is actually a permit to use QlikView, nothing more. What you can do with this permit depends first and foremost on the type.
- A Doc CAL lets you enter the library and "possibly" open a single book, the book the CAL has been assigned to.
- A Named CAL lets you enter the library and "in theory" take every book in the library and read it.
So, have a license, can get in. No license, door stays shut. What you can do in this library also depends on "authorizations". You can see this as a sort of filtering mechanism of the books available to you once inside the hall (the "possible" and "in theory" from above).
A Doc CAL MUST correspond to an authorization on that single book. Otherwise your CAL is wasted because you paid to get in but there are no books available to you.The librarian (QMC) has multiple tools to let you open that particular book.
The same with a Named CAL. You can get in, but only those books will be available to you for which you have been explicitly authorized. This still means that the librarian can mistakenly authorize you to see no books at all (no authroization)
As I said before, CAL assignment is usually static. The librarian has to manually assign CALs to every visitor to the library, before any authorizations on books will be in effect. BTW the librarian can also
- Assign CALs but forget to authorize
- Grant authorizations to specific users, but forget to license them.
The net result is the same: none of these users will be able to open any books (QlikView documents).
Mind you, QlikView allows for default authorizations which means that once you have been assigned a Named CAL, you can see and open everything. I guess that's more or less the case in your situation.
And to answer your questions: if you do not assign a CAL (Client Access License) to 2nd user BOB, then Bob won't be able to use QlikView or open any QlikView document in the AccessPoint. QlikView will not assign a Named CAL to Bob because he hasn't got a Document CAL. The librarian has to explicitly grant access to the library first.
However, there is one such thing as Dynamic CAL assignment, which will do exactly what you are describing. Dynamic CAL assignment automagically assigns a CAL to every passerby that has no CAL yet and as long as there are CALs available. I'm not a fan of this feature and I do disable it at every customer on first installation. It can become a management nightmare, especially when CAL availability is limited.
I strongly advise reading the Server Reference Manual chapter I already mentioned, 15.4 Combining Different CALs. It ties everything together in a short list of steps that QVS itself uses when determining what to do with a never-met-before portal visitor "Dave".
Edit: just another note after reading the red text in your screenshot: Named Users are not the same as Named CALs. Named Users are simply users you identify by account name. Compare this with "All Users", or "All Authenticated Users". Named Users have nothing to do with licenses, they're just a category name.
Hope I made it clearer.
Ok. I am taking over for someone else, and the dashboards authorization/distribution (ie... assigning of specific users) were set up entirely within DOCUMENTS >> USER DOCUMENTS >> Authorization / Document CALs.
The only purpose of the tasks under DOCUMENTS >> SOURCE DOCUMENTS was to set the reload schedules--NOt the user assignments.
There are zero assignments of users under any of the tasks in the picture you show. Now I am wondering if the way we currently have it set up even has the ability to properly allocate Named vs Document licenses. Ourt end-users can view and utilize the documents fine---I am just unclear as to how to best manage my Named vs Document CALS given this set-up.
Bill and Peter,
Thank you both for your patience and thorough replies. I got on a webex yesterday afternoon and the consultant who set this up helped me understand. The way i worded my questions throughout this thread could have been better, i realize. Ive always been well aware of the difference between a named CAL and document CAL, their purposes, etc... i simply didnt know where to manage them.
He showed me the area where you manually assign all of our Named licenses, and that pretty much solved the issue. i wasnt sure where to look. Once you assign user licenses there, you dont need to worry about Document CAL users using up one of your Named licenses because they arent even on that list. I went back through all of our dashboards and cleaned them up, making sure that all Named users and Document Cal users were authorized (since that has nothing to do with licenses) and now I know how to clearly identify the # of Named Licenses and Document CALs we have being utilized and their last usage.
Thanks again and Im sorry for apparently over-complicating this question. Appreciate the help
If you go into QMC, go to SYSTEM // Licenses // select QlikView Server (at which point options on the right will appear) // Client Access Licenses // Assigned CALs
From there below you can manually enter all of the folks on your network that you want to have a NAMED User License.
Document CALs are set up differently.
Hope this helps
Documents // User Documents // Select which QV doc on the left you want to assign Document CALs to (will bring up new view on the right) // Document CALs
Then similarly just add peeps that you want to have a document CAL to that specific QV doc... Not sure if you have to specify the # of CALs you want allocated to the Document... i currently just manually update that number to equal however many Document CALs i have tied to a specific doc.... not sure if its mandatory to fill out though as long as you dont go over the total number of CALs you pay for....