Managing user permissions
This section explains how to access user permissions at different levels in the hierarchy, edit user permissions, add and remove users or groups, disable or enable inheritance, restore inherited permissions if they were overridden, and view effective permissions for a user.
By default, inheritance is enabled for all objects (users and groups). This means that permissions are automatically carried over from the parent object. You can turn inheritance on or off for all objects at the current level. Effective permissions are the permissions that are in effect for a user at any particular level.
For more information on the underlying concepts, see Granular access control and Inheritance and overrides.
- In the Qlik Compose Console, from the Management menu, select User Permissions.
By default, the User Permissions window opens at Console root level, displaying the currently assigned user role permissions for each defined user/group. These permissions apply globally unless they are overridden at any of the lower levels.
Changes to Compose permissions will affect any level inheriting those permissions.
- In the User Permissions window, select the All Projects tab.
The All Projects User Permissions window displays the currently assigned user role permissions for each defined user/group. These permissions apply to all projects unless they are overridden at any of the lower levels.
When inheritance is enabled, permissions will be inherited from the Compose root level.
- In the Qlik Compose Console, select the required project, and then select User Permissions from the context menu.
The Project User Permissions window shows the user role permissions that apply to the specific project '{project name}' for each defined user/group. These permissions apply to the specific project unless overridden at any of the lower levels.
When inheritance is enabled, permissions will be inherited from the All Projects level.
-
In the User Permissions for project: '{project name}' window, click the Model tab. The Model User Permissions window shows the user role permissions that apply to the specific project model for each defined user/group.
Information noteWhen inheritance is enabled, these permissions will be inherited from the Project level.
-
In the User Permissions window, adjust the permission slider for a user or group as required.
Information noteAdjusting the slider stops inheritance from the parent object.
- Click Save or OK to accept the changes, or Discard Changes or Cancel to undo them.
- In the User Permissions window, click Add.
- In the Add User/Group window, select User or Group.
-
Enter the name for the new user or group in the following format:
NetBIOS_name\user (for example: qa\qa)
- Click OK to add the user/group and close the window.
- Click Save or OK to accept the changes, or Discard Changes or Cancel to undo them.
- In the User Permissions window, select the user or group you want to remove.
- Click Remove.
- When prompted, click Yes to confirm.
- Click Save or OK to accept the changes, or Discard Changes or Cancel to undo them.
-
In the User Permissions window, click Disable Inheritance.
Information noteThis option disconnects the entire authorization level from the parent level.
-
In the Disable Inheritance window, select whether you want to:
- Convert inherited permissions on this object into explicit permissions: This option changes inherited permissions to explicit permissions. Any new users or groups will not inherit permissions from the parent.
- Remove all inherited permissions from this object: This option removes all existing permissions inherited from the parent level. Any new users or groups will not inherit permissions from the parent.
-
Click Disable. If you chose to convert inherited permissions, the check mark in the Inherited column changes into an X. If you chose to remove inherited permissions, all users and groups disappear from the list.
- Click Save or OK to accept the changes, or Discard Changes or Cancel to undo them.
-
In the User Permissions window, click Enable Inheritance.
Information noteThis option enables inheritance for all users and groups on this level.
-
In the Enable Inheritance window, select whether you want to:
- Inherit all permissions from parent and override any definition manually made at this level: This option reinstates inherited permissions for all users and groups that are already defined, and new users and groups will inherit their permissions from the parent level.
- Inherit all permissions from parent but keep definitions manually made at this level: This option preserves the permissions already defined for the existing users and groups, and adds all permissions from the parent level. New users and groups will inherit permissions from the parent level.
- Click Enable.
- Click Save or OK to accept the changes, or Discard Changes or Cancel to undo them.
- In the User Permissions window, select the user or group.
-
Click Restore Inheritance . The check mark returns to the Inherited column to indicate that permissions for this user or group are inherited from the parent.
-
In the User Permissions window, do one of the following:
- Select a user in the list on the left.
-
If a user does not appear in the list but exists in the system and is part of a group, enter the user name in the text field in the Effective Permissions pane on the right. Make sure to use the following format:
NetBIOS_name\user (for example: qa\qa)
-
Click Get Effective Permissions. The effective permissions for the user you entered appear below the button.