When using custom property-based security for Streams and Apps, modifying a user's group memberships or other attributes may not reflect immediately in Qlik Sense.Environment:
Qlik Sense Enterprise (all versions use this mechanic)
When using Active Directory Group Membership for Qlik Sense security rules, changing a user's membership may not be immediately reflected in Qlik Sense until the User Directory Connector task is
executed, or other changes are made in the system that would trigger this refresh, such as disabling/enabling security rules.
The product is behaving as expected in this scenario. User attributes and memberships are refreshed from Active Directory only when the user signs into Qlik Sense or when the User Directory Connector task is executed, either manually or according to schedule.
Manually trigger a User Directory Sync task or wait until the next execution. Alternatively you may try to log in using the affected user, as this will trigger an attribute and group membership sync from Active Directory.