Security Permissions

Security permissions allows you to control what actions can be performed by users in your Qommentary environment. Permissions can be applied at a stream, application, sheet or commentary level. Permissions can be assigned to multiple users and groups (custom and AD).

The Resource Directory Tree displays all resources the user is allowed to see based on the security permissions defined in Qlik Sense.

Overview The security permissions page is divided in several sections.

References:

1. Resource Directory: Full Qlik Sense directory tree based on security permissions

2. User/Groups: This section displays the Users and Groups associated to the selected resource level

3. Permissions: This section displays the Permissions for a selected User or Group and a selected resource level.

Qommentary Insights

Permission	Description
Create Commentary	Create a commentary
Update Commentary	Update own commentaries and commentaries created by other users
Delete Commentary	Delete a published commentary
Publish Commentary	Publish own and other’s commentaries
Approved Commentary	Approve a commentary that is under review
Submit for approval	Submit a commentary for approval
Recall Commentary	Recall a published commentary

Qommentary Table

Permission	Description
Create Commentary	Add comments
Update Commentary	Update comments
Delete Commentary	Delete comments

Qommentary Writeback

Permission	Description
Manage Writeback	• Add, update, and delete writeback data • Update metadata: add and remove columns files • Create, update, delete and remove data connections
Write	Add and update writeback data
Delete	Clear all writeback data

Qommentary Pivot Table

Permission	Description
Write	Add comments Delete own comments
Delete	Delete own and other's comments

Qommentary Admin Console

Permission	Description
Delete Commentary	Read, archive, and delete commentaries and comments
Manage Workflows	Create and update approval workflow templates Add users and groups to the steps. NOTE: if there are security rules, the users and groups that can be added to the steps will be restricted by those rules
Manage Security	• View users and group section • Edit user and group details, but not roles • Add and delete permissions at resource level

Permissions in Qommentary are assigned at resource level.

Users and groups can have many permissions at different resource levels, therefore Qommentary applies complex logic to resolve various permission assignments to determine which ones should govern the access.

The following rules are followed to resolve permissions conflicts:

1. If a User or Group has an assigned Role, this will take precedence over the permissions set on this section. i.e. if a User has an Admin role, any permissions assigned to the user will be overridden by the role.

2. Top level permissions take precedence over child level permissions

Assigning permissions to a new user or group

1. Select a resource by clicking on it (expand the resource to move between levels)

2. Click on Add button from the User/Groups section.

3. Start typing the group or user in the corresponding dropdowns. Qommentary will display the groups or users that match the criteria

Search for Groups

Search for Users

4. Select the group or user. You can add more user or group by repeating step 4. 5. Click on Add button 6. Qommentary will add the users and groups selected to the User/Groups section

7. Select the user or group you want to assign the permissions. By default, Qommentary selects the first row on the Users/Groups (row highlighted in blue).

8. On the Permissions section, click on the Manage button

9. The Qommentary Manager will display a popup window containing all the permissions

10. Select the permissions that you want to assign to the user or group by clicking on the checkboxes and then click on Save button.

11. The assigned permissions will be displayed in the permissions section with a green color.

Assigning permissions to an existing user or group

1. Click on the resource node

2. Select a User or Group from the User/Groups section

3. Click on Manage button

4. Check the permissions that you want to remove from the User or Group.

5. Click on Save button

Removing permissions from a user or group

1. Click on the resource node

2. Select a User or Group from the User/Groups section

3. Click on Manage button

4. Uncheck the permissions that you want to remove from the User or Group.

5. Click on Save button