Introduction to Qovern
What Qovern does, how it talks to your Qlik Cloud, who can do what and what changes in each plan.
The Qovern app is in Portuguese. Screen and button names are shown as they appear in the app, with the translation in parentheses.
Qovern is a governance platform for Qlik Cloud. It brings together in one place what is usually spread across the Qlik administration console, the apps’ load scripts and control spreadsheets: who can access each space, what each person sees inside each app, when apps reload and what changed in the environment.
What you can do
- Section Access without touching the script: each app’s access rules live in Qovern, which validates them, generates the file, publishes it to Qlik and triggers the reload.
- Space access: grant, change and remove access for people and groups to Qlik spaces, with Qlik’s own roles, in bulk too.
- Qlik users and groups: invite people to the tenant, change roles, disable users and organize groups.
- Inventory and history: apps, scripts, data flows, spaces and users in the tenant, with the history of what happened to each app.
- Reloads: create, chain and monitor the apps’ reload schedules.
- Environment and alerts: Qlik consumption, reload quota, reload health and email alerts.
- Automatic documentation of apps and an audit trail of everything done in Qovern.
How Qovern connects to Qlik
Qovern uses a machine-to-machine (M2M) OAuth client created in your Qlik Cloud tenant. The client secret is encrypted in the database and never goes through the browser.
This client acts in Qlik through a technical user, the service account, which appears in the Qlik user list with the client’s name. For Qovern to write to a space (publish the rules file, create schedules, grant access), this service account must be a member of the space with enough permission. The step by step is in Getting started.
Important: Qlik is still the one enforcing security. Qovern only keeps the rules, generates the file and asks Qlik to reload.
Roles of Qovern users
Each person has a role in each customer account:
| Role | What they do |
|---|---|
| Administrator (Administrador) | Everything: Qlik connection, rules of any app, spaces, Qlik users and groups, alerts, team and subscription. |
| Manager (Gestor) | Edits rules and schedules only for the apps assigned to them. Can reload apps and run reloads. |
| Reader (Leitor) | Views inventory, rules, history and reloads, without changing anything. |
The manager and reader roles are available from the Pro plan up.
Plans
| Standard | Pro | Enterprise | |
|---|---|---|---|
| Apps under management | up to 10 | unlimited | unlimited |
| Controlled spaces | up to 5 | unlimited | unlimited |
| People in Qovern | 1 administrator | administrator, manager and reader | same as Pro |
| History and audit trail | last 30 days | full | full |
| Automatic documentation, alerts and reload scheduling | no | yes | yes |
| Audit trail export to CSV and multiple Qlik tenants | no | no | yes |
Changing plans never deletes anything: what already exists above the limit stays, only new additions are blocked. See Subscription and plans.