Managing user entitlements
Tenant administrators manage user access rights by assigning roles. Based on these access rights, the user is automatically assigned a user entitlement. Tenant administrators can manually change user entitlements from the Management Console.
What are user entitlements
The Full User entitlement is applicable to all use cases in Qlik Cloud and the users can do anything that their permissions allow, such as create shared spaces, create, edit, and publish sheets or apps, or work with Data Integration. The users can take on any space roles and user roles, as well as administrative roles in the tenant.
The Basic Users are free of charge and have limited access. As a Basic User, you can only have the space role Has restricted view in managed spaces. This allows you to view app content and create notes and private bookmarks. You cannot make any changes to apps but you can download images and data from apps if allowed in the User Default settings (see Roles and permissions for users and administrators). If you want to do more in Qlik Cloud, an administrator can assign additional permissions. Basic Users are available with Analytics Premium and Qlik Cloud Enterprise subscriptions.
The number of user entitlements is based on your Qlik Cloud subscription. You can monitor the number of available and consumed users entitlements in the Management Console Home. For more information, see Monitoring resource consumption.
Automatic assignment of user entitlements
Tenant administrators manage user access rights by assigning roles. Based on these access rights, the user is automatically assigned the correct user entitlement.
When a user logs in to Qlik Cloud, the access rights of a Basic User are validated according to the following criteria:
-
If the user only has the Has restricted view role in managed spaces, the user is assigned the Basic User entitlement.
-
If the user has permissions above what is included in the Has restricted view role, the user is assigned Full User entitlement.
Note that if you give a Basic User any additional permissions, such as access to an app in a shared space or more than just view permission, they will automatically be promoted to a Full User. You can override this assignment if needed and change the user entitlement manually. However, demoting a Full User to Basic User does not automatically change the user’s access control. If you want to find out why a user was promoted to Full User, you can check the user's access rights in the Entitlement column under Users > All users. Remove these permissions to prevent the user from being promoted to Full User again at the next login.
Manually changing user entitlement
Tenant admins can change the user entitlement for a user. Note that removing an entitlement does not affect roles or permissions. To prevent a user from being assigned Full User entitlement again at login, check which access rights that promoted the user and remove them.
Do the following:
- In the Management Console, go to Users > All users.
-
Select one or more users from the list.
- Click Change entitlements.
- Select or clear the entitlement checkbox, and then click Save.
Checking access rights
Tenant admins can investigate which access rights that caused a specific user to be assigned Full User entitlement.
Do the following:
-
In the Management Console, go to Users > All users.
-
In the Entitlement column, hover over
.A tooltip shows information about the roles that promoted the user to Full User.
Tooltip with access rights
Managing users in status Requested
The number of user entitlements is based on your Qlik Cloud subscription. Administrators can monitor the number of available and consumed users entitlements in the Management Console Home. If you add Full Users to the tenant when there are no more Full User entitlements available, the users get status Requested. In this status, they can't access to the hub or open apps. The users requesting an entitlement are listed in the Management Console under Users > All users.
Users remain in status Requested until you either add more user entitlements or remove access for other users, which frees up entitlements. Users requesting an entitlement are automatically assigned Full User entitlements when more are made available. Contact Qlik Sales to purchase additional Full User entitlements.
Full Users are added to a tenant by invitation. You can also promote Basic Users to Full Users by assigning them space roles or security roles. If the limit for user entitlements is reached, you will see a warning when you add members to a space, as this could cause users to be put into status Requested. If you want to find out why a user was promoted to Full User, you can check the user's access rights in the Entitlement column under Users > All users.
To free up entitlements by removing access from other users, you can remove the Full User entitlement, disable the user, or delete the user.
Do the following:
- In the Management Console, go to the Users > All users.
-
Select one or more users from the list.
- To remove the user entitlement, click Change entitlements, clear the Full User checkbox, and then click Save.
- To disable or delete a user, click
, select Disable or Delete, and then confirm the action.