Available resource conditions

The following tables list the available resource conditions.

The lists are not complete, they only display the most common examples of resource conditions. For a source of all available repository service resources, see Open API specification for Repository Main API. Also note that not all of the parameters on certain entities are security accessible, that is, rule evaluation will not take them into account.

General

General properties descriptions and examples
Property	Description	Example
resource.@<customproperty>	Custom property associated with the resource. In the examples, @Department is the custom property name.	resource.@Department = Finance. resource.@Department = user.userDirectory
resource.name	Name of the resource.	resource.name like "US". A string containing "US" will match the condition.
resource.id	ID of the resource.	resource.id=5dd0dc16-96fd-4bd0-9a84-62721f0db427 The resource in this case is an app.

Resource user and owner of an object

Resource user and owner of an object properties
Property	Description	Example
user.email owner.email	Email of the user. Email of the owner.	user.email="user@domain.com" owner.email="owner@domain.com"
user.environment.browser	Session based attribute for browser. Use the "like" operator instead of the "=" operator, because the browser data is sent in a format that includes version and other details, for example: "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0". You can use the "=" operator instead, but then you need to specify the whole value.	user.environment.browser like "Firefox"
user.environment.context	Session based attribute for context. (The QMC has a separate setting for context.)	user.environment.context="Management Access"
user.environment.device	Session based attribute for device.	user.environment.device="iPhone"
user.environment.ip	Session based attribute for IP address.	Security rules example: Access to stream by IP address
user.environment.os	Session based attribute for operating system.	user.environment.os like "Windows*"
user.environment.secureRequest	Session based attribute for secureRequest. Value true - if SSL is used - otherwise false.	user.environment.secureRequest="true"
user.environment.[SAML attribute]	Session based attribute that is supplied at the time of authentication, such as user.environment.group.	user.environment.xxx="<attribute name>"
user.environment.[ticket attribute]	Session based attribute that is supplied at the time of authentication, such as user.environment.group.	user.environment.xxx="<attribute name>"
user.environment.[session attribute]	Session based attribute that is supplied at the time of authentication, such as user.environment.group.	user.environment.xxx="<attribute name>"
user.group owner.group	Group that the user belongs to. Group that the owner belongs to.	user.group=resource.app.stream.@AdminGroup owner.group=@Developers
user.userdirectory owner.userdirectory	User directory that the user belongs to. User directory that the owner belongs to.	user.userdirectory="Employees" owner.userdirectory="Employees"
user.userId owner.userId	ID of the user. ID of the owner.	user.userId="<userID>" owner.userId="<ownerID>"
user.roles owner.roles	Roles of the user. Roles of the owner.	user.roles="AuditAdmin" owner.roles="SystemAdmin"

To use the user.environment conditions, you must enable Extended security environment in the virtual proxy.

See: Virtual proxies

Resource app

Resource app properties
Property	Description	Example
stream.name	Name of the stream that the app is published to.	stream.name="Finance"

Resource app.object

Resource app.object properties
Property	Description	Example
app.stream.name	Name of the stream that the app object is published to.	app.stream.name="Test"
app.name	Name of the app that the object is part of.	app.name="Q3_Report"
approved	Indicator of whether the object was part of the original app when the app was published. Values: true or false.	resource.approved="true"
description	Object description.	resource.description="old"
objectType	Possible values: app_appscript bookmark dimension embeddedsnapshot genericvariableentry hiddenbookmark loadmodel masterobject measure odagapplink sheet snapshot story	resource.objectType="sheet"
published	Indicator of whether the object is published. Values: true or false.	resource.published="false"

Resource related to apps such as app.content and reloadtask

Resource related to apps such as app.content and reloadtask properties
Property	Description	Example
app.stream.name	Name of the stream that the app is published to.	app.stream.name="Test"
app.name	Name of the app.	app.name="Q3_Report"

Resource DataConnection

Resource DataConnection properties
Property	Description	Example
Type	Type of data connection. Possible values: OLEDB ODBC Folder Internet Custom (for all custom connectors)	resource.type!="folder"

Resource SystemRule

Resource SystemRule properties
Property	Description	Example
Category	System rule category. Possible values: Security License Sync	resource.category="license"
ResourceFilter	Resource filter of the rule.	resource.resourcefilter matches "DataConnection_\w{8}-\w{4}-\w{4}-\w{4}-\w{12}"
RuleContext	Context for the rule. Possible values: BothQlikSenseAndQMC QlikSenseOnly QMCOnly	resource.rulecontext="BothQlikSenseAndQMC"
Type	Type of rule. Possible values: Default Read only Custom	resource.type!="custom"

Resource ContentLibrary

Resource ContentLibrary properties
Property	Description	Example
Type	Possible values: media	resource.type="media"

Resource ServerNodeConfiguration

Resource ServerNodeConfiguration properties
Property	Description	Example
IsCentral	Central node indicator, values: true or false.	resource.iscentral="true"
nodePurpose	Node purpose: development or production.	resource.nodepurpose="production"

Resource UserDirectory

Resource UserDirectory properties
Property	Description	Example
userDirectoryName	Name of the user directory.	resource.userDirectoryname="Employees"

Resource UserSyncTask

Resource UserSyncTask properties
Property	Description	Example
userDirectory.name	Name of the user directory connector.	resource.userDirectory.name="Employees"
userDirectory.userDirectoryName	Name of the user directory.	userDirectory.userdirectoryname="Employees"

Resource Widget

Resource Widget properties
Property	Description	Example
library.name	Name of the library that the widget belongs to.	resource.library.name="Dev"

For some resources (for example, environment.browser), you need to select Extended security environment in the proxy settings.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!

Leave your feedback here