Editing security rules

You can edit a security rule that you have update rights to. If you edit a default rule, that is, a rule that is supplied with Qlik Sense, the rule type definition changes from Default to Custom. Keep in mind that changing a default rule, or adding a new rule that affects the default rules, may cause unexpected behavior in Qlik Sense. Use the rule preview feature to check rule behavior before implementing changes to default rules. Remember that only read only and default rules are automatically updated when you upgrade to a new Qlik Sense version.

Do the following:

1. Select Security rules on the QMC start page or from the StartS drop-down menu.
   Tip noteYou can filter a column by using the filtering option: ..

2. Select the rule you want to edit.

3. Click Edit in the action bar.

4. Edit the applicable fields for the rule.

   Tip noteWhen using multiple conditions, you can group two conditions by clicking Group. After the conditions have been grouped, you can ungroup them by clicking Ungroup. The default operator between conditions is OR. You can change this in the operator drop-down list. Multiple conditions are grouped so that OR is superior to AND.
   Resource

   Property	Security rule will be applied to
   Unspecified	Access rules
   App access	Apps
   App object access	Objects The Objects' objectTypes, for example: sheet, story, bookmark, measure, or dimension.
   Content library access	Content libraries
   Data connection access	Data connections
   Extension access	Extensions
   Reload task access	Reload tasks
   Node access	The configuration of Qlik Sense nodes
   Stream access	Streams
   User access	Users
   Security rule access	Security rules
   User directory connector access	User directories
   User sync task access	User synchronization tasks

   Resource condition

   Property name	Available in	Description
   @<customproperty>	App, App.Object, DataConnection, ReloadTask, ServerNodeConfiguration, Stream, Task	The custom property associated with the resource.
   resource.@<customproperty>	App.Object, ReloadTask	The custom property associated with the resource.
   app.name	App.Object, ReloadTask	The name of the associated app.
   app.owner.@<customproperty>	ReloadTask	The custom property associated to the stream of an app. See the corresponding owner property for a description.
   app.owner.email	ReloadTask	Owner property associated with the app. See the corresponding owner property for a description.
   app.owner.environment.browser	ReloadTask	Owner property associated with the app. See corresponding owner property for description.
   app.owner.environment.context	ReloadTask	Owner property associated with the app. See corresponding owner property for description.
   app.owner.environment.device	ReloadTask	Owner property associated with the app. See corresponding owner property for description.
   app.owner.environment.ip	ReloadTask	Owner property associated with the app. See corresponding owner property for description.
   app.owner.environment.os	ReloadTask	Owner property associated with the app. See corresponding owner property for description.
   app.owner.environment.secureRequest	ReloadTask	Owner property associated with the app. See corresponding owner property for description.
   app.owner.group	ReloadTask	Owner property associated with the app. See corresponding owner property for description.
   app.owner.name	ReloadTask	The user name of the owner of the resource.
   app.owner.userDirectory	ReloadTask	The user directory of the owner of the resource
   app.owner.userId	ReloadTask	The user id of the owner of the resource
   app.stream.@<customproperty>	App.Object, ReloadTask	Owner property associated with the app. See corresponding owner property for description.
   app.stream.name	App.Object, ReloadTask	The name of the associated stream.
   category	SystemRule	The system rule category: License, Security or Sync.
   description	User	The description of the owner retrieved from the user directory.
   email	User	The email addresses that are available from the connected user directories.
   environment.browser	User	Security rule will be applied to the type of browser. Supported browsers: Chrome, Firefox, Safari, MSIE or Unknown. Example 1:   Define browser and version: Firefox 22.0 Chrome 33.0.1750.154 Information note If the browser information contains a slash (/), replace it with a space. Example 2:   Use the wildcard (*) to include all versions of the browser: environment.browser like Chrome*
   environment.context	User	Security rule will be applied only to the Qlik Sense environment that the call originates from. Available preset values: ManagementAccess or AppAccess.
   environment.device	User	Security rule will be applied to the type of device. Available preset values: iPhone, iPad or Default.
   environment.ip	User	Security rule will be applied to an IP number.
   environment.os	User	Security rule will be applied to the type of operating system. Available preset values: Windows, Linux, Mac OS X or Unknown.
   environment.secureRequest	User	Security rule will be applied to the type of request. Available preset values: SSL True or False.
   group	User	The group memberships of the owner retrieved from the user directory.
   roles	User	A role that is associated with the user.
   name	App, App.Object, DataConnection, Extension, License.LoginAccessType, ReloadTask, ServerNodeConfiguration, Stream, User, UserDirectory, UserSyncTask, SystemRule,	The name of the resource or user.
   objectType	App.Object	The type of app object. Available preset values: story, masterobject, properties, sheet, dimension.
   owner.@<customproperty>	App, App.Object, DataConnection, Extension, Stream	The custom property associated with the owner of the resource.
   owner.description	App, DataConnection, Extension, Stream	The description of the owner retrieved from the user directory.
   owner.email	App, App.Object, DataConnection, Extension, Stream	The email of the owner retrieved from the user directory.
   owner.environment.browser	App, App.Object, DataConnection, Extension, Stream	The browser environment of the owner of the resource.
   owner.environment.context	App, App.Object, DataConnection, Extension, Stream	Security rule will be applied only to the Qlik Sense environment that the call originates from. Available preset values: ManagementAccess or AppAccess.
   owner.environment.device	App, App.Object, DataConnection, Extension, Stream	The device environment of the owner of the resource.
   owner.environment.ip	App, App.Object, DataConnection, Extension, Stream	The IP environment of the owner of the resource.
   owner.environment.os	App, App.Object, DataConnection, Extension, Stream	The OS environment of the owner of the resource.
   owner.environment.secureRequest	App, App.Object, DataConnection, Extension, Stream	Indicates if the sent request is encrypted or not, that is using SSL or not (True or False).
   owner.group	App, App.Object, DataConnection, Extension, Stream	The group memberships of the owner retrieved from the user directory.
   owner.name	App, App.Object, DataConnection, Extension, Stream	The user name of the owner of the resource.
   owner.userDirectory	App, App.Object, DataConnection, Extension, Stream	The user directory of the owner of the resource
   owner.userId	App, App.Object, DataConnection, Extension, Stream	The user id of the owner of the resource.
   published	App.Object	The status of the app object.
   resourceFilter	SystemRule	The existing resource definitions (from the Resource column in the security rules overview).
   ruleContext	SystemRule	Specifies where the rule is to be applied: Both in hub and QMC, Only in hub, or Only in QMC.
   stream.@<customproperty>	App	The custom property associated with the stream.
   stream.name	App	The name of the associated stream.
   type	SystemRule, DataConnection	The type of security rule or data connection.
   userid	User	A user’s ID.
   userdirectory	User	The name of a user directory.
   userDirectory.name	UserSyncTask	The name of the user directory connection that the user sync task applies to.
   userDirectory.userDirectoryName	UserSyncTask	The name of the user directory that the user directory connector is connected to.
   userDirectoryName	UserDirectory	The name of the user directory connection in the QMC.

   Action properties

   Property name	Description
   Create	Create resource
   Read	Read resource
   Update	Update resource
   Delete	Delete resource
   Export	Be able to export a resource to a new format, for example Excel
   Publish	Be able to publish a resource to a stream
   Change owner	Be able to change the owner of a resource
   Change role	Be able to change user role
   Export data	Be able to export data from an object

   User condition properties

   Tip noteAny user properties contained in connected user directories will be shown in the drop-down list. This could, for example, be an email address or department name.

   Property	Description
   @<customproperty>	A custom property associated with the user.
   name	A user's full name.
   userdirectory	The name of a user directory.
   userid	A user's ID.
   description	The description of the owner retrieved from the user directory.
   email	The email addresses that are available from the connected user directories.
   group	The group memberships of the owner retrieved from the user directory.
   environment.browser	Security rule will be applied to the type of browser. Supported browsers: Chrome, Firefox, Safari, MSIE or Unknown. Example 3:   Define browser and version: Firefox 22.0 Chrome 33.0.1750.154 Information note If the browser information contains a slash (/), replace it with a space. Example 4:   Use the wildcard (*) to include all versions of the browser: environment.browser = Chrome*
   environment.context	Security rule will be applied only to the Qlik Sense environment that the call originates from. Available preset values: ManagementAccess or AppAccess.
   environment.device	Security rule will be applied to the type of device. Available preset values: iPhone, iPad or Default.
   environment.ip	Security rule will be applied to an IP number.
   environment.os	Security rule will be applied to the type of operating system. Available preset values: Windows, Linux, Mac OS X or Unknown.
   environment.secureRequest	Security rule will be applied to the type of request. Available preset values: SSL True or False.

   Name properties

   Property	Description
   Name	The name of the rule.

   Context properties

   Property	Description
   Context	Specifies where the rule is to be applied: Both in hub and QMC, Only in hub, or Only in QMC.

5. Click the Preview tab to view the access rights that your rule will create and the users they apply to.

   See: Previewing how security rules affect user privileges

   Information noteClick Apply to save your changes. If a mandatory field is empty, Apply is disabled.

6. Click Apply in the action bar to save the edited rule or click Cancel to discard changes.

   Successfully updated is displayed at the bottom of the page.

You have now edited a security rule.