Qlik users and groups

The Usuários (Users) and Grupos (Groups) screens, under the Segurança (Security) menu, show and change the people and groups in your Qlik Cloud tenant. Don’t confuse them with the Equipe (Team), the people who use Qovern (see Team and permissions).

User list

The Usuários screen lists everyone in the tenant, with email, status in Qlik (active, invited or disabled), roles, groups and app accesses in the period. Search looks at name, email or role.

The list comes from the sync with Qlik, which runs on its own every hour. People just created in Qlik may take up to an hour to show up. To bring them in right away, use Sincronizar apps e usuários (Sync apps and users) in the account menu.

Invite people to Qlik

1. In Usuários, click Convidar pessoa (Invite person).
2. Enter up to 20 emails.
3. Choose one or more Qlik roles. They apply to every email in the batch.
4. Click Enviar convites (Send invitations).

Qlik sends the invitation email and the person shows up as Convidado (Invited) until they accept. The result lists each email: invited, invited without the role (the invitation was sent, but the role could not be applied) or failed.

Requirement: inviting people, changing roles and managing groups require Qovern’s service account to have the TenantAdmin role in Qlik. Without it, Qovern warns you and explains what to do.

Change roles

In the ⋮ menu of a person’s row, Alterar funções (Change roles) opens Qlik’s roles in two columns: Administração (Administration) and Demais funções (Other roles). Current roles come already checked. When you save, the whole set is replaced by what is checked. The person must keep at least one role.

Disable, re-enable and delete

Also in the ⋮ menu:

• Desativar (Disable) removes the person’s access to Qlik without deleting anything. Roles are kept.
• Reativar (Re-enable) restores access.
• Excluir do Qlik (Delete from Qlik) removes the person from the tenant. Their apps are not deleted, but they are left without an owner.

You can’t change your own account or Qovern’s service account here.

Groups

The Grupos screen (administrators only) lists the tenant’s groups. There are two kinds:

• Qlik groups (created in Qlik itself or by Qovern): you can change the name, description, roles and members, and delete them;
• Identity provider (IdP) groups: the name and members come from your IdP, so only the roles can be changed.

To create one, click Criar grupo (Create group). To add or remove people, open the group and check who belongs to it (up to 50 at a time). You can also change a person’s groups from the ⋮ menu on the Usuários screen, under Alterar grupos (Change groups).

Qlik system groups (such as Everyone) cannot be changed.

Groups in Section Access

Section Access rules can identify who they apply to by group instead of email. The name must match Qlik’s exactly, with the same upper and lower case. See Section Access.