Qlik Sense Enterprise licenses are based either on access types, or on tokens. Depending on your license, you can allocate either access types or access passes to users, to allow them to access Qlik Sense.
- Access types licenses are the Professional and Analyzer Users licenses (user-based) and Analyzer Capacity licenses (capacity-based).
With a Professional and Analyzer Users license you can allocate professional access and analyzer access.
With an Analyzer Capacity license you can allocate analyzer capacity access, where consumption is time based (analyzer time). - With a Qlik Sense Token license you use tokens to allocate access passes to users. You can allocate user access and login access.
Access types
Professional and Analyzer Users licenses and Analyzer Capacity licenses grant a predefined number of access allocations. The License Enabler File (LEF) defines the terms of your license and the access types that you can allocate to users. You can combine these for a subscription based license if you use the signed license key when your deployment is activated. You can combine only user-based licenses if you are using a perpetual license. You must use a license with a signed key if you are licensing analyzer capacity access.
Professional access
Professional access is allocated to an identified user to allow the user to access streams and apps within a Qlik Sense site. The professional access is intended for users who need access to all features in a Qlik Sense installation. A user with professional access can create, edit, and publish sheets or apps, and make full use of the available features, including administration of a Qlik Sense site.
For Qlik Sense installations licensed with a serial and control number, if you remove professional access allocation from a user, the access type is put in quarantine, if it has been used within the last seven days. If it has not been used within the last seven days, the professional access is released immediately. You can reinstate quarantined professional access, to the same user, within seven days.
The maximum number of parallel user connections for a single user of this type of access pass is five (5).If you use a license with a signed license key, accessing the QMC also counts and adds to the maximum number of parallel sessions, which is five. To avoid unnecessary session consumption, the root admin should not be allocated any type of access.
When a user with the maximum number of parallel user connections ends a connection (for example, by logging out) five minutes must pass before the user can use the access pass to add another connection (for example, by logging in).
Analyzer access
Analyzer access is allocated to an identified user to allow the user to access streams and apps in the hub. The analyzer access is intended for users who consume sheets and apps created by others. A user with analyzer access cannot create, edit, or publish sheets or apps, but can create and publish stories, bookmarks and snapshots based on data in apps. The user can also create bookmarks, print objects, stories, and sheets, and export data from an object to Excel.
For Qlik Sense installations licensed with a serial and control number, if you remove analyzer access allocation from a user, the access type is put in quarantine, if it has been used within the last seven days. If it has not been used within the last seven days, the analyzer access is released immediately. You can reinstate quarantined analyzer access, to the same user, within seven days.
The maximum number of parallel user connections for a single user of this type of access pass is five (5).When a user with the maximum number of parallel user connections ends a connection (for example, by logging out) five minutes must pass before the user can use the access pass to add another connection (for example, by logging in).
Analyzer capacity access
Overview of Analyzer capacity licensing
Analyzer capacity is a consumption-based license type that provides access to the same features as Analyzer entitlement. Users with this license can access streams and apps in the hub and consume sheets and apps created by others. They can also create stories, bookmarks, and snapshots based on data in apps. However, creating, editing, or publishing sheets or apps is not permitted.
With an Analyzer capacity license, you subscribe to a defined amount of analyzer time, measured in minutes, per month (calendar date). These minutes are shared among users and can be consumed by anyone in the user group, including anonymous users.
Consumption is measured in six-minute units, with each new six-minute period resulting in the consumption of one unit.
Access passes
With a Qlik Sense Token license you use tokens to allocate access passes to users. The License Enabler File (LEF) determines the number of tokens that you can allocate to different access passes. A user without an access pass cannot access apps.
User access pass
This type of access pass allows a unique and identified user to access the hub.
The access pass is valid within an entire Qlik Sense site. For example, if a user first connects to a node in the USA and then, at a later stage, connects to a node in the UK, the user consumes the same access pass, if the two nodes are connected to the same central node.
See: Qlik Sense Enterprise on Windows architecture
The maximum number of parallel user connections for a single user of this type of access pass is five (5).When a user with the maximum number of parallel user connections ends a connection (for example, by logging out) five minutes must pass before the user can use the access pass to add another connection (for example, by logging in).
One (1) token corresponds to one (1) access pass. The access passes are allocated using the Qlik Management Console (QMC).
Removing user access pass allocation
When a user access pass is removed, it enters a quarantine for seven (7) days, counting from the last time that the access pass was used. For example, if the access pass is used on January 10, the tokens used to allocate the access pass are not available for new allocations until January 18. During the quarantine period, the original allocation of the access pass can be reinstated, which means that the quarantine period ends and the user can start using the access pass again.
Login access pass
This type of access pass allows an identified or anonymous user to access the hub for a maximum of 60 continuous minutes per 28-day period. If the user exceeds the 60 minutes time limitation, the user connection does not time out. Instead, another login access pass is used. If no more login access passes are available, the user connection is discontinued.
- If an identified user is disconnected, the user can re-connect and continue to use the same access pass, if re-connecting within the 60 minutes.
- If an anonymous user is disconnected, the user gets a new access pass when re-connecting.
The login access pass tracks the number of logins and runs over 28 days. For example, if 1000 logins are assigned to Group A, the users in Group A can use 1000 logins over 28 days. If 100 logins are consumed on Day 1, the 100 logins are available again on Day 29.
The maximum number of parallel user connections for a single user of this type of access pass is five (5). Note that this only applies to identified users. An anonymous user can only have one (1) user connection. When a user with the maximum number of parallel user connections ends a connection (for example, by logging out) five minutes must pass before the user can use the access pass to add another connection (for example, by logging in). However, a user can have more connections than allowed by a single access pass by consuming additional access passes.
One (1) token corresponds to ten (10) access passes. The access passes are allocated using login access groups in the QMC.
Removing login access pass allocation
When a login access group is removed, the tokens used to allocate the access pass become available in accordance to the following procedure:
- For every ten (10) unused login access passes, one (1) token is freed up.
- For every ten (10) login access passes that leave the used state after the period specified in the Login access pass section above has passed, one (1) token is freed up.