14 Replies Latest reply: Jul 3, 2013 2:10 PM by James Johnston RSS

    How does Qlikview know to not utilize a Named User License?

    James Johnston

      Ok, I have read numerous similar discussions on this and still cant find a crystal clear answer so I wanted to post the question differently.

       

      I have User CALS and Document CALS.  I have users who need to access numerous documents, and thus are assigned a Named User CAL.  I also have a handful of users who ONLY need access to 1 specific document, and thus they would use a Document CAL.

       

      I still dont understand how Qlikview has set this up within QMC and how it knows whether to assign/utilize a Named License or Document License. 

       

      For example, I assign Bob a document CAL to document A.  I reload everything having ONLY added him under Document CALs.  He cant see anything.  Thus, based on what I've read here, i need to ALSO add him under a Named User License under "Authorization".  Ok, I do that... now Bob can access the document.  How does Qlikview know that Bob should NOT be utilizing one of my significantly more expensive Named Licenses when I am forced to have him listed under both?  And where within QMC can I actually see the # of Named Licenses that are being used?

       

      Sorry for the long question, but I have watched 100 people ask this question 100 different ways and I still dont have a clear answer.  Common sense tells me that you should be to simply add your Named Users under "Named Users" and your Document CAL users under "Document CALs" for each document, but that does not appear to be the case and I fear that I am currently getting "double-charged" on my licenses. 

       

      thanks for help!

       

      James

        • Re: How does Qlikview know to not utilize a Named User License?
          James Johnston

          Let me clarify my last sentence.  When I say double-charged, what I really mean is I fear that I have some users utilizing a "Named License" when I only want them to utilize a Document License.  Sorry for confusion. Any help is appreciated!

            • Re: How does Qlikview know to not utilize a Named User License?
              Bill Britt

              You have to assign the document to him when you do a distribution. That sets up the Authorization on the document, meaning Bob has rights to it. Now you have to assigned a document Cal to Bob also.

               

              Bill

                • Re: How does Qlikview know to not utilize a Named User License?
                  James Johnston

                  Thanks for quick reply, Bill.  Can you elaborate a bit more on this?  What do you mean "assign to him when I do a distribution"?  I add him to the list of Document CALs for that document, and then do a reload of the job within QMC.  Shouldnt that take care of it?

                    • Re: How does Qlikview know to not utilize a Named User License?
                      Bill Britt

                      When you publish a document you have to assign it to users. This is different from assigning a user a license.

                       

                       

                       

                       

                      QV11-2012-12-10-10-20-56.png

                      Bill

                        • Re: How does Qlikview know to not utilize a Named User License?
                          Peter Cammaert

                          I'm not entirely sure that I understand your explanation, but here is what I can add to clarify things a bit:

                           

                          There are two things that need to be configured before an AccessPoint visitor can open a document:

                           

                          • A license has to be assigned to this user. A Doc CAL or a Named CAL will do. No need to assign both.
                          • Access has to be granted to this document. That's Authorization (nothing to do with licenses)

                           

                          The last one depends on whether you are using a Publisher or not. With a Publisher, you are able to distribute after a reload. When distributing, you can grant specific users access to a document. Others that have been assigned a license, even a Named CAL will not be able to see or open that document if they are not properly authorized.

                           

                          QlikView will not freely choose what to use or assign. That happens more or less in a specific order:

                           

                          1. First the user is authenticated. Now QVS at least knows his/her ID.
                          2. Then QVS looks for a license that matches the ID. ("Dynamice CAL assign." makes this very complex)
                          3. Then QVS checks authorizations.

                           

                          In case you're not sure about this Dynamic CAL assignment or what comes first, read section 15.4 Combining Different CALs in the Server Reference Manual. It's short and IMHO very clear.

                           

                          Best,

                           

                          Peter

                            • Re: How does Qlikview know to not utilize a Named User License?
                              James Johnston

                              pcammaert,

                               

                              Thanks for the detailed reply.  I'd like to provide screenshots of what I am doing and I am hoping you can confirm or deny that it is being done correctly.

                               

                              Step 1: Under User Documents > Document CALs, I simply assign myself a Document CAL (i do not want to utilize a Named User License for myself)

                               

                              step 1 - Assign myself as DOCUMENT CAL.png

                               

                              Step 2: Per your instructions, authorization has nothing to do with licenses.  Thus, I assign myself as a Named User with authorization to this same document.

                               

                              step 2 authorize myself as NAMED USER.png

                               

                              Step 3:  We shift over to Source Documents and create our reload task.  Note, that the way this was set up, there are nothing but reload tasks here for all documents.  There is ZERO distribution of users performed here.  The big area circled red is blank and may or may not be an issue given what I am trying to do.

                               

                              step 3 RELOAD ONLY TASK - No User Distribution.png

                               

                              So at the end of the day, all users can see and access qlikview because we currently have them all listed as authorized Named Users.

                               

                              My question is... what if I authorized a 2nd user, BOB, to this Document A, but did NOT add him to the Document CAL section where I listed only myself? (only added him to the authorized users...so now we have 2 authorized users and only 1 Document CAL assigned) How does Qlikview know to say "Ok, I want to utilize a Document CAL to James Johnston, but I want to utilize a Named User License to Bob."   And where on QMC can I see a clean statistics list of which users are utilizing Document CALS and which are utilizing named licenses?

                               

                              If this is still confusing, then I give up  

                                • Re: How does Qlikview know to not utilize a Named User License?
                                  Peter Cammaert

                                  Allow me to improve a bit on my previous explanation. If I do it right, you'll be able to answer your last question yourself. Otherwise, it's still at the end of this reply

                                   

                                  Let's compare QlikView to a library. In this library you need Licenses to get in, and authorizations to grab a book from a shelf and open it. A CAL is actually a permit to use QlikView, nothing more. What you can do with this permit depends first and foremost on the type.

                                   

                                  • A Doc CAL lets you enter the library and "possibly" open a single book, the book the CAL has been assigned to.
                                  • A Named CAL lets you enter the library and "in theory" take every book in the library and read it.

                                   

                                  So, have a license, can get in. No license, door stays shut. What you can do in this library also depends on "authorizations". You can see this as a sort of filtering mechanism of the books available to you once inside the hall (the "possible" and "in theory" from above).

                                   

                                  A Doc CAL MUST correspond to an authorization on that single book. Otherwise your CAL is wasted because you paid to get in but there are no books available to you.The librarian (QMC) has multiple tools to let you open that particular book.

                                  The same with a Named CAL. You can get in, but only those books will be available to you for which you have been explicitly authorized. This still means that the librarian can mistakenly authorize you to see no books at all (no authroization)

                                   

                                  As I said before, CAL assignment is usually static. The librarian has to manually assign CALs to every visitor to the library, before any authorizations on books will be in effect. BTW the librarian can also

                                   

                                  • Assign CALs but forget to authorize
                                  • Grant authorizations to specific users, but forget to license them.

                                   

                                  The net result is the same: none of these users will be able to open any books (QlikView documents).

                                   

                                  Mind you, QlikView allows for default authorizations which means that once you have been assigned a Named CAL, you can see and open everything. I guess that's more or less the case in your situation.

                                   

                                  And to answer your questions: if you do not assign a CAL (Client Access License) to 2nd user BOB, then Bob won't be able to use QlikView or open any QlikView document in the AccessPoint. QlikView will not assign a Named CAL to Bob because he hasn't got a Document CAL. The librarian has to explicitly grant access to the library first.

                                   

                                  However, there is one such thing as Dynamic CAL assignment, which will do exactly what you are describing. Dynamic CAL assignment automagically assigns a CAL to every passerby that has no CAL yet and as long as there are CALs available. I'm not a fan of this feature and I do disable it at every customer on first installation. It can become a management nightmare, especially when CAL availability is limited.

                                   

                                  I strongly advise reading the Server Reference Manual chapter I already mentioned, 15.4 Combining Different CALs. It ties everything together in a short list of steps that QVS itself uses when determining what to do with a never-met-before portal visitor "Dave".

                                   

                                  Edit: just another note after reading the red text in your screenshot: Named Users are not the same as Named CALs. Named Users are simply users you identify by account name. Compare this with "All Users", or "All Authenticated Users". Named Users have nothing to do with licenses, they're just a category name.

                                   

                                  Hope I made it clearer.

                                   

                                  Peter

                      • Re: How does Qlikview know to not utilize a Named User License?
                        James Johnston

                        Ok.  I am taking over for someone else, and the dashboards authorization/distribution (ie... assigning of specific users) were set up entirely within DOCUMENTS >> USER DOCUMENTS >> Authorization / Document CALs.

                         

                        The only purpose of the tasks under DOCUMENTS >> SOURCE DOCUMENTS was to set the reload schedules--NOt the user assignments.

                         

                        There are zero assignments of users under any of the tasks in the picture you show.  Now I am wondering if the way we currently have it set up even has the ability to properly allocate Named vs Document licenses.  Ourt end-users can view and utilize the documents fine---I am just unclear as to how to best manage my Named vs Document CALS given this set-up.

                        • Re: How does Qlikview know to not utilize a Named User License?
                          James Johnston

                          Bill and Peter,

                           

                          Thank you both for your patience and thorough replies.  I got on a webex yesterday afternoon and the consultant who set this up helped me understand.  The way i worded my questions throughout this thread could have been better, i realize.  Ive always been well aware of the difference between a named CAL and document CAL, their purposes, etc... i simply didnt know where to manage them.

                           

                          He showed me the area where you manually assign all of our Named licenses, and that pretty much solved the issue.  i wasnt sure where to look.  Once you assign user licenses there, you dont need to worry about Document CAL users using up one of your Named licenses because they arent even on that list.  I went back through all of our dashboards and cleaned them up, making sure that all Named users and Document Cal users were authorized (since that has nothing to do with licenses) and now I know how to clearly identify the # of Named Licenses and Document CALs we have being utilized and their last usage.

                           

                          Thanks again and Im sorry for apparently over-complicating this question.  Appreciate the help

                           

                          james