Skip to main content Skip to complementary content

Adding users to a Qlik Anonymous Access tenant

The individual who creates the tenant is the service account owner. If you are the service account owner, you are also the first tenant administrator and the only tenant user with access to the tenant. Add more tenant users by sending email invitations or configure an identity provider. Anonymous users are not added to the tenant, but instead access public content as an external user with minimal, view-only permissions.

Information note

This topic is applicable to Qlik Anonymous Access subscriptions. For other Qlik Cloud subscriptions, see:

You can add tenant users by configuring an identity provider (IdP), or by sending individual email invitations, but not both. However, when you switch from using the invite option to using an identity provider configuration, the invite option will remain available until the identity provider has been activated.

Information noteAdministrators should ensure their tenant users can meet the Qlik Cloud requirements. For more information, see System requirements and supported browsers.

Terminology on this page

The following terminology is used in content about anonymous access:

  • Anonymous users: Users who are accessing app content anonymously, either through anonymous access links to an app or by consuming embedded analytics anonymously. These users are not members of the Qlik Cloud tenant, and also do not require Qlik accounts.

  • Tenant users: Users who are members of the tenant, who manage the tenant and develop analytics for consumption by anonymous users. Tenant users are users with Full User entitlement or specific administrator privileges in the tenant.

Adding users with an identity provider

If you have an IdP, you can create an IdP configuration under Identity provider in the Administration activity center.

To set up an identity provider, see Identity providers in Qlik Cloud.

Adding users with email invitations

To send an email invitation, you must be a tenant administrator. You can invite users to join the tenant by sending email invitations from the Users pane in the Administration activity center or from your User profile menu. In the invitation window, you can list multiple email addresses separated by a comma or a space. When the user receives the email invitation, they can join the tenant by clicking a link in the email. The link is valid for a limited period. It redirects the user to a registration page.

You can see the invitation status under Users > All users in the Administration activity center. Select Pending invites in the dropdown list to the left or select Pending invites in the Status column. Hover over the invite to see the expiry date. Invites that have expired are shown in red in the table. When the user has registered, the status changes to active. If needed, you can resend or delete the invitation. If you delete the invitation, the user cannot register, even if the link has not expired.

Pending invites in the Users pane

Users pane filtered on Pending invites

Adding a user by email invitation

Do the following:

  1. In the Administration activity center, go to Users and click Invite.
  2. Enter the email addresses of the users that you want to invite, and then click Invite.

    Information note

    You can delete an invitation from the Administration activity center.

  3. The invited users are listed in the table in the Users pane.

Managing users in the Administration activity center

When users are added to the tenant, they are listed under Users > All users in the Administration activity center.

You can search for users by name, email, user ID, or IdP subject. The search on user ID and IdP subject must be an exact match. Hover over the information icon Information in the Name column to see user ID and IdP subject. The IdP subject field can be used for distinguishing one user from another if the names are identical.

For each user in the table, click More to open a menu where you can assign and remove security roles, change user entitlement, activate or disable users, revoke mobile access if it has been granted, and delete users.

User statuses

Each user has a status depending on whether they are a fully registered user, a user who has been invited but not yet registered, or a user who has been disabled. You can select a status to filter by in the dropdown list.

User status dropdown list

Dropdown list with statuses in User pane
User statuses
Status Description
Active The user is fully registered. They can user the product according to their assigned roles. For more information about roles and permissions, see Assigning security roles and custom roles.
Disabled

The user cannot access their account or use the product. All alerts owned by the user will be disabled.

Provisioned The user is provisioned by the SCIM connector but has not yet registered. You can assign roles to groups of provisioned users and add the groups to spaces. For more information, see Provisioning users and groups using SCIM.

Pending invites

The user is invited but has not yet registered. A user ID is created but no entitlement has been assigned.
Orphans

The user has been assigned an entitlement to their IdP subject from the license service. The user has not yet registered, and no user ID has been created.

Requested

The user is invited to the tenant, but the number of users exceeds the limit in the subscription. The user does not have access to the product until the administrator either adds more user entitlements or removes access for other users, which frees up the entitlements for the requested users. For more information , see Managing users in status Requested for Qlik Anonymous Access subscriptions.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!