Administration

Syncing users from Qlik Sense

Assigning administrator rights to a user

You will need to always have at least one administrator user at any one time. There is no limit on how many administrator users you can assign.

Do the following:

1. Navigate to Admin > User Management > Users.
2. Use the search object to find the user you wish to make an administrator and highlight that row.
3. Click on the edit button on the bottom toolbar.
4. Change the user role dropdown and select administrator.
5. Click Save.

Assigning user privileges

Professional level users can be given additional functionality through the assignment of user privileges. Only professional level users will be shown in the assigner user lists for privileges as other users cannot be assigned additional privileges. Administrator role users are also excluded from this list as they have access to all privileges as part of their user role.

The following user privileges are available:

Steps to assign a user privilege

Do the following:

1. Navigate to Admin > User Management > User Privileges. (You will need to be logged in as an administrator to view this menu.)

   You will see a table that identifies the user privilege types available with a count to help you see what has been assigned.

2. Click the edit (pencil) icon of the user privilege type to which you wish to assign users.

   The next page will show you two lists of users, on the left those who have not been assigned this privilege and on the right those who are already assigned.

3. Select those users you wish to move, use the search to find users easily.
4. Click the direction arrows to move them from one list to the other.
5. Click Update.

Enabling access for a user

A user will automatically be enabled to use Qlik Alerting based on their license allocation rights in Qlik Sense. You can disable their access as identified below. However, any user who wishes to create and/or to receive an alert will require an email address to be stored against their user record in Qlik Alerting. The email can come from one of two sources; the Qlik Sense user sync if the email address is an attribute stored against the user in Qlik Sense (i.e. it comes from the user directory connector) or the email can be entered and saved directly in Qlik Alerting.

To enter a user's email address do the following:

1. Navigate to Admin > User Management > Users (you will need to be logged in as an administrator in Qlik Alerting to see this page).
2. Search for the user you wish to add an email for.
3. Click on the ... menu on the user and select Edit.
4. Enter the email address in the Email ID field.
5. Click Save.

The user should now be able to receive email notifications, if they have an appropriate license in Qlik Sense, and can request to set their password from the Qlik Alerting login page.

Disabling access for a user

Using trusted SSL certificates with Qlik Alerting

The Qlik Alerting install ships with a default self-signed certificate to secure the connection between the desktop of the user and the hosted application. This is a secure approach that enables HTTPS connections but will result in error messages in browsers, such as “The site’s security certificate is not trusted” (Chrome) or “This Connection is Untrusted” (Firefox).

This also has an affect on the way the Qlik Alerting Extension will work in Qlik Sense as this can cause cross-domain errors which require the user to click on a message that allows the browser to ‘run unsafe scripts’ (not an optimal user experience).

Steps to add a trusted SSL certificate for Qlik Alerting

Do the following:

1. Access to the Qlik Alerting server via remote desktop.
2. Navigate to the C:\Program Files\Qlik Alerting\config\certificates folder.

3. Backup the server.pem and server_key.pem certificate files, so you can rollback the change if necessary.

   Information note

   • If you have been using a previous version of Qlik Alerting or Ping Alerting and have client.pem and client_key.pem certificates, you can simply rename them. Replace client with server.

   • Pass phrases for SSL certificates are not supported at this time.

4. Replace the certificate files with your equivalent server.pem and server_key.pem certificate files.
5. Restart the Qlik Alerting Gateway service.

Additional security configuration options

Additional configuration options are available for organizations who wish to manage security tightly or wish to be specific about which security features to apply:

• Allow or block HTTP access.
• Allow or block TLS 1.2 (default), TLS 1.1, or TLS 1.0.
• Add additional security headers to manage CORS access and other security restrictions.

To access these settings do the following:

1. Access to the Qlik Alerting server via remote desktop.
2. Navigate to the C:\Program Files\Qlik Alerting\gateway\config folder.
3. Open the default.json file with a text editor.
4. Find the "allowInsecure" and "customHeaders" settings where you can change the settings.
5. Save the default.json file.
6. Restart the Qlik Alerting Gateway Service.

Changing the ports for Qlik Alerting web access

If you wish to change the default ports from 4551 for HTTP and 4552 for HTTPS you must make this change in two places. For example, if you are running Qlik Alerting on a stand alone server with no other programs reserving these ports, you may wish to use ports 80 (HTTP) and 443 (HTTPS), which makes it easy for a user as they do not have to enter these default ports in the URL each time.

Do the following:

1. Update the settings in the web UI.
   1. In the Qlik Alerting web portal, navigate to Admin > Config.
   2. Update the HTTP and ports to those you would like to change to, for example 80 (HTTP) and 443 (HTTPS).
   3. Click Save.
2. Update the config file for the services.
   1. On the server, navigate to C:\Program Files\Qlik Alerting\config.
   2. Open the default.json file.
   3. On line 4, edit "httpPort": 4551; changing the 4551 value to your HTTP port entered in the Qlik Alerting settings step, for example port 80.
   4. On line 5, edit "httpsPort": 4552; changing the 4552 value to your HTTPS port entered in the Qlik Alerting settings step, for example port 443.
   5. Restart the Qlik Alerting Gateway service.
3. You should now be able to access Qlik Alerting through these new ports.
4. If you have used the Qlik Sense extension in any app, you will need to reset the port setting in each of these instances.

Backup and restore the MongoDB database

You will want to periodically backup the MongoDB database as this serves as the core of Qlik Alerting. It is recommended that you backup the database before each install.

Steps to backup

1. RDP onto the server as an administrator user.
2. Open a command window as an administrator.

3. Enter the following to change directory:

   cd "C:\Program Files\MongoDB\Server\4.0\bin"

   Information noteIf you are using a newer version of MongoDB, or it is located in a different location such as a D:\ drive, then please adjust this appropriately.

4. Enter the following command, where Backup Name is the identifier for your backup:

   mongodump --db=qlikalerting --out="Backup Name"

5. This will create a new folder in the C:\Program Files\MongoDB\Server\4.0\bin folder called "Backup Name" and will export all of the data from the database into JSON format files.
6. Zip this new folder and store where you require.

Steps to restore

1. RDP onto the server as an administrator user.
2. Open a command window as an administrator.

3. Enter the following to change directory:

   cd "C:\Program Files\MongoDB\Server\4.0\bin"

   Information noteIf you are using a newer version of MongoDB, or it is located in a different location such as a D:\ drive, then please adjust this appropriately.
4. Move the backup to a location that is easy to identify and unzip the file so the folder is located here, for example D:\backups\Backup Name.

5. Enter the following command, where Backup Name is the identifier for your backup:

   mongorestore "D:\backups\Backup Name"

6. You will now have restored the qlikalerting database in MongoDB.