Security rules example: Recreating document admin by creating QMC app admin

In this example, you recreate a Qlik Sense document administrator in Qlik Sense. You can do this by:

• Creating a new role (app admin)
• Creating a custom property to connect this role to the apps

Security rules for the app admin role:

Procedure

Do the following:

1. Create the three new security rules (AppAdminQmcSections, AppAdminRead and AppAdminModify): 

   1. Select Security rules and click PCreate new.

   2. In the Advanced and Basic sections, fill in the fields Resource filter, Conditions, Actions and Context per Security rule code.

   3. Set the Name to correspond to the activity.
   4. Click Apply.

2. Apply the role to the user to become app admin: 

   1. Select Users, select a user and click Edit.

   2. Click P under Admin roles and select AppAdmin.

   3. Click Apply.

3. Create a new custom property and add the user as a value:

   1. Select Custom properties and click Create new.
   2. Type AppAdmin in the Name field.
   3. At Resource types check the checkbox for Apps.
   4. At Values click PCreate new , add the User ID as a value and click OK.
   5. Click Apply.

4. Select the apps that this user should be able to administrate:

   1. Select Apps, Ctrl+click to select more than one app and click Edit.
   2. Select the User ID for the custom property AppAdmin.
   3. Click Apply.

You have now created and assigned the app admin role. When the user with this role logs in to the QMC the following can be accessed: apps, tasks, sheets and streams.

Security rule code

The following is the security rule code for this example, with explanatory comments:

Security rule code for "AppAdminQmcSections"

Security rule code for "AppAdminRead"

Security rule code for "AppAdminModify"

This rule determines what the app admin can modify in the QMC. This is the same rule as for read except for that streams cannot be modified.