How to Change the Qlik Sense Service Account - Considerations when changing the Sense Service account
Article Number: 000049699 | Last Modified: 2019/07/17
On the occasion that the Qlik Sense Services are not using the account that has been set aside as the Service Account, they can be changed over with no issues as long as some preparations have been made.
There are a handful of key components where the account running Qlik Sense is dependent on OS or file level permissions, including:
Access to certificate(s) for the site
File / Share related (Qlik Sense):
Access to the installation path for Qlik Sense
Access to %ProgramData%
Access to the Service Cluster share
Access to external systems as data sources, e.g.
UNC shares to QVDs, CSVs, etc
This article will outline how to successfully change the service account running Qlik Sense.
As a note, this guide is intended to be exhaustive. Many of the file level permissions would ordinarily be inherited from membership to the Local Administrators group.
Note: If Qlik Sense is installed in another location, then the above path will need to be adjusted
Note: If using Qlik Sense 3.x Shared Persistence, then the above path may need to be adjusted to the 9.3 directory rather than the 9.6 directory
Type in \x to enable extended mode on the terminal
For builds X-Y: SELECT "AppImportFolder" FROM "RepositoryServiceSettings";
For builds X-Y: SELECT "Temporaryfilepath" FROM "ServerNodeConfigurations";
If this path points to a user's profile or other path which the new service account does not have access to, then run this style of command:
UPDATE "public"."RepositoryServiceSettings" SET "AppImportFolder"='C:\foo' WHERE "AppImportFolder"='C:\Users\....';
UPDATE "public"."ServerNodeConfigurations" SET "Temporaryfilepath"='C:\foo' WHERE "Temporaryfilepath"='C:\Users\....';
Note: Ideal location is a path like C:\ProgramData\Qlik\Sense\Apps which is not tied to an individual user's account
Ensure membership in the Local Groups that Qlik Sense requires:
Start > Computer Management
Navigate to Local Users and Groups > Local Groups
Add the new service account as a member of:
Administrators (if using this configuration option)
Performance Monitor Users
Qlik Sense Service Users
Now for all Qlik service (except the Qlik Sense Repository Database Service) swap the account over by using the windows services control panel
Start the remaining Qlik Sense Services
Access the QMC to validate functionality, preferably as a previously configured RootAdmin
Access the Data Connections section of the QMC
Toggle the User ID field and change the data connections used by the License and Operations Monitor apps to use the new user ID and password:
Execute the License Monitor reload task
Add the RootAdmin role to the new service account
QMC > Users
Filter on the new UserID > Edit
Add RootAdmin role
Inspect the configured User Directory Connectors and change the User ID and password combination if previously configured
Go into the QMC > Data Connections section
Inspect all Folder data connections and determine all network shares that the service account needs access to. Either change them yourself or alert the necessary teams to provide both Share and NT level access to these shares.
Inspect all Data Connections and ensure that none use the old Service account and password
Follow up with necessary teams to provision access to data sources which used the old credentials.
Collaborate with over 60,000 Qlik technologists and members around the world to get answers to your questions, and maximize success.