Qlik users and groups

The Users and Groups screens, under the Security menu, show and change the people and groups in your Qlik Cloud tenant. Don’t confuse them with the Team, the people who use Qovern (see Team and permissions).

User list

The Users screen lists everyone in the tenant, with email, status in Qlik (active, invited or disabled), roles, groups and app accesses in the period. Search looks at name, email or role.

The list comes from the sync with Qlik, which runs on its own every hour. People just created in Qlik may take up to an hour to show up. To bring them in right away, use Sync apps and users in the account menu.

Invite people to Qlik

1. In Users, click Invite person.
2. Enter up to 20 emails.
3. Choose one or more Qlik roles. They apply to every email in the batch.
4. Click Send invitations.

Qlik sends the invitation email and the person shows up as Invited until they accept. The result lists each email: invited, invited without the role (the invitation was sent, but the role could not be applied) or failed.

Requirement: inviting people, changing roles and managing groups require Qovern’s service account to have the TenantAdmin role in Qlik. Without it, Qovern warns you and explains what to do.

Change roles

In the ⋮ menu of a person’s row, Change role opens Qlik’s roles in two columns: Administration and Other roles. Current roles come already checked. When you save, the whole set is replaced by what is checked. The person must keep at least one role.

Disable, re-enable and delete

Also in the ⋮ menu:

• Disable removes the person’s access to Qlik without deleting anything. Roles are kept.
• Re-enable restores access.
• Delete, confirmed with Delete from Qlik, removes the person from the tenant. Their apps are not deleted, but they are left without an owner.

You can’t change your own account or Qovern’s service account here.

Groups

The Groups screen (administrators only) lists the tenant’s groups. There are two kinds:

• Qlik groups (created in Qlik itself or by Qovern): you can change the name, description, roles and members, and delete them;
• Identity provider (IdP) groups: the name and members come from your IdP, so only the roles can be changed.

To create one, click Create group. To add or remove people, open the group and check who belongs to it (up to 50 at a time). You can also change a person’s groups from the ⋮ menu on the Users screen, under Change groups.

Qlik system groups (such as Everyone) cannot be changed.

Groups in Section Access

Section Access rules can identify who they apply to by group instead of email. The name must match Qlik’s exactly, with the same upper and lower case. See Section Access.