Glossary

Qlik Cloud terms

• Tenant: your company’s environment in Qlik Cloud, with its own address (https://<name>.<region>.qlikcloud.com).
• Space: where apps and files live. It can be personal (one person only), shared (to develop as a team) or managed (to publish to consumers).
• App: a Qlik analytics app. Qlik also lists data scripts and data flows as apps; they prepare data and have no Section Access.
• Reload: a run of the app’s load script, which brings the data in again and applies Section Access.
• DataFiles: each space’s file connection, where Qovern stores the rules file.
• Role (in the tenant): what the person can do in the tenant (for example, TenantAdmin). A role in a space is different: what they can do in that space (consumer, facilitator…).
• TenantAdmin: the administrator role for the whole tenant.
• IdP (identity provider): the system that signs people in to Qlik (for example, Microsoft Entra ID), where groups may come from.
• Data for analysis: a Qlik Cloud Analytics capacity indicator that measures the volume of data brought into Qlik.

Security terms

• Section Access: Qlik’s row-level security, which defines which data each person sees inside an app.
• ACCESS: the column that says whether the row is ADMIN (sees everything) or USER (sees only what the row allows).
• USER.EMAIL and GROUP: the columns that identify the person (by email) or the group the rule applies to.
• Reduction field: the data model field used to filter each person’s data (by default, CHAVE). It must have the same name as the field in the app.
• OMIT: fields that stay hidden for whoever matches the rule.
• Protected ADMIN: an ADMIN row created by Qovern that can’t be removed, so the app is never left without an administrator.

Qovern terms

• Customer: your company inside Qovern, with its own team, plan and Qlik connection.
• M2M OAuth client: a machine-to-machine credential created in Qlik for Qovern to connect.
• Service account: the technical Qlik user that acts on behalf of the M2M client. It shows up with the client’s name and must be a member of the spaces.
• Managed app: an app whose Section Access is kept by Qovern.
• Publication: each version of the rules file sent to Qlik.
• Controlled space: on the Standard plan, one of the up to 5 spaces available in Qovern.
• Chained reload: a schedule that runs when another one finishes, instead of having its own time.
• Sync: the copy of the Qlik inventory (apps, spaces, users, groups) into Qovern.
• Team: the people who use Qovern for the customer, with the administrator, manager or reader role.