Named CAL question

[powerqlik]

Hi guys, we have 3 named CALS of 5 total that we pay for and only the "Administrator" can access all the individual dashboards in "Access Point" online.  The only way I can get the "named CALS" access to dashboards in "Access Point" is to assign individual QVM "Document CALS" which defeats the purpose of having the "named CALS" as they use to have access to all dashboards in "Access Point".   The security is set as NTFS.

I do have the "Named CAL" users in the "Administrator folder", who have unrestricted access to the computer and domain and they are also part of the "Qlikview Administrator folder", which have rights to administer the local Qlikview Server and Publisher.  Can someone in detail explain what I can be missing or what changed on me or what I need to do to get the "Named CALS" access again?  Note, when the "Named CAL" goes to login in Access Point, it opens Qlikview without any of the dashboards.

[Jill_Masinde · Accepted solution]

@powerqlik 

You are correct Named User should be able to  access all the individual dashboards in "Access Point".

Named User CAL allows a single named user to access any QlikView document that resides on the QlikView Server as often and for as long as they need. Users are assigned a Named User CAL through the QlikView Management Console (QMC) manually or automatically (default).

Once a user has been authenticated (that is, the system knows who the user is), the first step in assigning the security privileges has been completed. The second step is to understand the authority or access rights that the user has to applications, data, or both. This step is referred to as Authorization. 

Are you using NTFS or DMS authorization?

NTFS authorization means that access (permissions) to QlikView documents are managed by way of NTFS rights. The main consequence towards QlikView users is that a user should exist in AD  or you cannot assign NTFS rights.

DMS authorization means that QlikView itself will manage access & permissions to QlikView documents. This has a big impact with respect to what you are now able to do for QlikView users:

• Document rights can be assigned in the QMC (you cannot do that with NTFS authorization)
• Also non-AD users can be granted access to QlikView documents (for example Custom Directory users)
• Document permissions are more fine-grained and integrated in the QlikView Management procedures.

See help for more details

https://help.qlik.com/en-US/qlikview/May2022/Subsystems/Server/Content/QV_Server/QlikView-Server/QVS....

How NTFS works

https://community.qlik.com/t5/Knowledge/Example-How-NTFS-authorization-works/ta-p/1714512

https://community.qlik.com/t5/Knowledge/How-to-check-effective-permissions-on-a-file/ta-p/1715783htt...

How DMS works

https://community.qlik.com/t5/Knowledge/Example-How-DMS-authorization-works/ta-p/1714502

I hope the following provides great details to resolving this issue.  

Regards

[powerqlik]

Hi Jill,

Thank you for your reply but I still am not able to access access point as a "Named CAL".  The authorization is set as NTFS.

[Jill_Masinde]

@powerqlik 

Check the effective permission for each user against the document(QVW)

https://community.qlik.com/t5/Knowledge/How-to-check-effective-permissions-on-a-file/ta-p/1715783

[powerqlik]

Thanks to everyone who replied.  Looks like I got it to work once I restarted all services again