Qlik Cloud: Content restricted or unavailable with Embedded Analytics User role applied

[DaveChannon]

The Embedded Analytics User role is a role available in Qlik Cloud for use cases where your users should not access the Qlik Cloud hub directly.

If the role has been applied to a user, the user will be denied access to experiences other than a Qlik Sense app. Admin roles can still access the Qlik Management Console.

The users will see message:

Content restricted or unavailable
Either this content does not exist or access to view this content has been restricted by the tenant administrator.

Resolution

Remove the Embedded Analytics User role from the user if the user requires access to additional experiences.

1. Open the Qlik Cloud Management Console (https://<tenant>.<region>.qlikcloud.com/console)
2. Go to Users 
3. Locate the user you need to modify and click the ellipses (...) menu
4. Click Edit roles
5. Scroll to the right, to Embedded Analytics User 
6. Uncheck the role
   
   
   
   

As good practice, always test your configurations in a development/test instance before deploying access control changes to your product instance.

What is the Embedded Analytics User role?

The Embedded Analytics User role is the first deny role added to Qlik Cloud, and for all users, it will prevent access to experiences other than a Qlik Sense app. Admin roles can still access the Qlik Management Console.

Why limit the user interfaces that a user can access?

Qlik customers use Qlik Sense in their own web apps (also termed 'mashups') to:

• Customize the look and feel of their analytics for internal consumers (e.g. bring all analytics into a single portal for the whole organization)
• Embed analytics into business workflows & processes to bring the data to where their users do their work (e.g. bring customer data into salesforce)
• Introduce analytics to their products or services, to improve stickiness, value to the customer, etc (e.g. a solution provider building an ERP solution may embed analytics using Qlik Sense rather than building and maintaining their own analytics solution)

Imagine the customer develops an operations dashboard that pulls together analytics from multiple Qlik Sense apps, to support daily operations tasks in the portal:

A simple web app with embedded KPIs and line charts from several Qlik Sense apps

The Qlik customer intends all customers to access these analytics only as part of their portal. A savvy user, however, could determine the URL for the Qlik Cloud tenant, navigate to the tenant, and then either:

1. Access content they should not - for example, other vizualisations in the app that aren't embedded in the portal
2. See that it's Qlik that powers the portal behind the scenes, breaking their experience
3. Use a different route for accessing access other than the portal

The Embedded Analytics User role allows tenant administrators to specify users or groups who can only access direct Qlik Sense apps, or the management console (if they have an admin role). These users will receive an error when navigating to the tenant URL, with a page which provides no onward navigation elements.

For more information about the Embedded Analytics User role, see Permissions for embedded analytics users | Help.qlik.com.

If you'd like to learn about how to embed Qlik Cloud into your web apps, take a look at embedding on qlik.dev.

[KellyHobson]

@DaveChannon  Thank you for this article it helped unlock my tenant!

Thanks,

Kelly

[yousrarami]

Insightful article. I had the same issue and didn't pay attention that I checked the role for the user.

[johnimichels]

Worked perfectly. Thank you so much.