Authorization can be set up per user, but it is better to do it through roles as much as possible. A role can be associated with multiple users. This makes it possible to easily modify the rights of groups of users in one place.
Create role
Creating a role is easy:
Navigate to the Settings > Authorization > Roles page;
Add a new role by clicking the "Add Role" button;
Give the role a recognizable name and click save.
It is possible to set up in a role both rights related to viewing dashboards and rights in interfaces as well as general rights within BrynQ. The three components are described separately below but of course this can be set up all at once.
Authorizing Dashboards
Open the role you just created;
Open the "Dashboard" tab;
You will see a list of data models and dashboards. A data model contains all the data around a particular topic. This can be a very large data model. A dashboard is then a visual layer over this data model. Multiple dashboards can be attached to 1 data model. For example, there might be a data model called "HRM." And then you could have 3 dashboards called "Inflow", "Absence" and "Contract Management"; See the "Create Dashboard" page how to create a dashboard;
Click all the dashboards that the role should have access to;
Check "Editable" if the role should actually be able to edit the dashboard. Generally, only administrators will receive this right;
Some roles may not require the user's own organizational chart to be followed, but may grant the user more rights in a dashboard. As an example, an HRM advisor who according to his own organization chart may only see the HRM department but in an absence dashboard should be able to see the entire organization. Suppose the absenteeism dashboard is selected, then the entire organization chart can be checked for this dashboard. Note that you grant permissions at data model level. If the user is given all permissions within the HRM data model, the user will have these permissions within all underlying dashboards.
Save the role.
Datamodel
Some users within BrynQ are also allowed to edit the data models themselves. Often these are only administrators who actually build dashboards and data models.
Open the role and click on the "Dashboard" tab;
Locate the desired data model;
Specify whether it should be possible to edit Sheets in Qlik Sense and edit the data model. Note, this is only possible with a Qlik Sense Professional token. With a Qlik Sense Analyzer token, you cannot edit dashboards in Qlik Sense;
Certain roles may not require following the user's own organizational chart, but a role may have more permissions in a dashboard. As an example, an HRM consultant who according to his own organization chart is only allowed to see the HRM department itself but in an absence dashboard should be able to see the whole organization. Suppose a role HRM is created and the absence dashboard is linked to it, then the entire organization chart can be checked for this dashboard. A user who then receives this role will be allowed to see everything for that dashboard.
Save the role
Assign page rights
Open the role you just created and click on the "Permissions" tab;
Check the pages to which the role should have access. For now, assigning page rights is quite simple. A role with access to a page can directly do everything on this page. In the future, the CRUD (Create, Read, Update, Delete) rights principle will be added to this;
Save the role.
Link role to user
Attaching the role to a user actually makes the role active. This can be done in two ways.
(1) Through the "Associated Users" tab in the role just created.This is normally the faster of the two methods.
Go to the 'Associated Users' tab in the role you just created;
Click on 'Link user';
Select one or more users and choose 'Save'.
(2) Through the user's own settings.
Navigate to Settings > Authorization > Users. Open a user as desired;
Go to the "Data" tab and select the desired role in the "Roles" field;
Note that now new dashboards and/or page permissions are added to the user's permissions. These come from the selected role. These permissions can no longer be modified at the user level. For example, if a user is entitled to the "Connectors" page according to his or her role, this cannot be modified at the user level unless the role is deactivated at the user or the role itself is modified.
Authorization can be set up per user, but it is better to do it through roles as much as possible. A role can be associated with multiple users. This makes it possible to easily modify the rights of groups of users in one place. Creating a role ...
This article describes how to add users and how to assign them appropriate permissions. Add user Navigate to Settings > Authorization > Users; Click on "Add User" in the upper right corner of the table; In the screen that follows, enter a name and ...
This article describes how to add users and how to assign them appropriate permissions. Add a user Navigate to Settings > Authorization > Users; Click on "Create" at the top right of the table; In the screen that follows, enter a name and email ...