Adding users to a Qlik Anonymous Access tenant
The individual who creates the tenant is the service account owner. If you are the service account owner, you are also the first tenant administrator and the only tenant user with access to the tenant. Add more tenant users by sending email invitations or configure an identity provider. Anonymous users are not added to the tenant, but instead access public content as an external user with minimal, view-only permissions.
This topic is applicable to Qlik Anonymous Access subscriptions. For other Qlik Cloud subscriptions, see:
-
Standard, Premium, or Enterprise edition of Qlik Cloud Analytics or Qlik Cloud Data Integration: Managing users - Capacity-based subscriptions
-
Qlik Sense Enterprise SaaS, Qlik Sense Business, or Qlik Cloud Government: Managing users - User-based subscriptions
You can add tenant users by configuring an identity provider (IdP), or by sending individual email invitations, but not both. However, when you switch from using the invite option to using an identity provider configuration, the invite option will remain available until the identity provider has been activated.
Terminology on this page
The following terminology is used in content about anonymous access:
-
Anonymous users: Users who are accessing app content anonymously, either through anonymous access links to an app or by consuming embedded analytics anonymously. These users are not members of the Qlik Cloud tenant, and also do not require Qlik accounts.
-
Tenant users: Users who are members of the tenant, who manage the tenant and develop analytics for consumption by anonymous users. Tenant users are users with Full User entitlement or specific administrator privileges in the tenant.
Adding users with an identity provider
If you have an IdP, you can create an IdP configuration under Identity provider in the Administration activity center.
To set up an identity provider, see Identity providers in Qlik Cloud.
Adding users with email invitations
To send an email invitation, you must be a tenant administrator. You can invite users to join the tenant by sending email invitations from the Users pane in the Administration activity center or from your User profile menu. In the invitation window, you can list multiple email addresses separated by a comma or a space. When the user receives the email invitation, they can join the tenant by clicking a link in the email. The link is valid for a limited period. It redirects the user to a registration page.
You can see the invitation status under Users > All users in the Administration activity center. Select Pending invites in the dropdown list to the left or select Pending invites in the Status column. Hover over the invite to see the expiry date. Invites that have expired are shown in red in the table. When the user has registered, the status changes to active. If needed, you can resend or delete the invitation. If you delete the invitation, the user cannot register, even if the link has not expired.
Pending invites in the Users pane
Adding a user by email invitation
Do the following:
- In the Administration activity center, go to Users and click Invite.
-
Enter the email addresses of the users that you want to invite, and then click Invite.
Information noteYou can delete an invitation from the Administration activity center.
-
The invited users are listed in the table in the Users pane.
Managing users in the Administration activity center
When users are added to the tenant, they are listed under Users > All users in the Administration activity center.
You can search for users by name, email, user ID, or IdP subject. The search on user ID and IdP subject must be an exact match. Hover over the information icon 
in the Name column to see user ID and IdP subject. The IdP subject field can be used for distinguishing one user from another if the names are identical.
For each user in the table, click 
to open a menu where you can assign and remove security roles, change user entitlement, activate or disable users, revoke mobile access if it has been granted, and delete users.
User statuses
Each user has a status depending on whether they are a fully registered user, a user who has been invited but not yet registered, or a user who has been disabled. You can select a status to filter by in the dropdown list.
User status dropdown list
| Status | Description |
|---|---|
| Active | The user is fully registered. They can user the product according to their assigned roles. For more information about roles and permissions, see Assigning security roles and custom roles. |
| Disabled |
The user cannot access their account or use the product. All alerts owned by the user will be disabled. |
| Provisioned | The user is provisioned by the SCIM connector but has not yet registered. You can assign roles to groups of provisioned users and add the groups to spaces. For more information, see Provisioning users and groups using SCIM. |
|
Pending invites |
The user is invited but has not yet registered. A user ID is created but no entitlement has been assigned. |
| Orphans |
The user has been assigned an entitlement to their IdP subject from the license service. The user has not yet registered, and no user ID has been created. |
| Requested |
The user is invited to the tenant, but the number of users exceeds the limit in the subscription. The user does not have access to the product until the administrator either adds more user entitlements or removes access for other users, which frees up the entitlements for the requested users. For more information , see Managing users in status Requested for Qlik Anonymous Access subscriptions. |