NPrinting On Demand: An error occurred code 403 message - User has no rights to access the resource

[Frank_S]

With Microsoft IIS deployed as the webserver, NPrinting On-Demand fails with: 

An error occurred: {"code":403,"message":"User has no rights to access the resource"}

Environment:

• Qlik NPrinting 
• QlikView Custom Accesspoint on Microsoft IIS Server

Resolution:

1. Check that you have fully configured all the prerequisites accurately from the installation and configuration requirements as documented on the Qlik Online Help > On-Demand reports > Creating On-Demand reports requirements.
2. Check that the User Account used to Run NPrinting Reports is a member of either the NPrinting 'Developer' or 'Administrator' security role. For permissions necessary for an custom role for On Demand users, visit Troubleshooting QlikView On Demand with NPrinting ... - Qlik Community - 1759095 
3. Review the steps for creating and using a self-signed certificate covered under How to configure NPrinting On-Demand with JWT Authentication for QlikView that uses IIS
4. If any of the configuration/requirements steps are missed, this too can cause the issue:
5. How to configure on demand: Help > On-Demand reports > Enabling On-Demand reports 
6. If using a third party see How to configure a .pfx certificate for use with N... - Qlik Community - 1711079  to accurately configure your certificates.
   
   • It is critical to remove the password from the .key file (see step 3 of the above article)
7. Certificates from a Trusted Root Authority must be installed on the Microsoft IIS server hosting QlikView AccessPoint in the Trusted Roots and Personal Folder as 'local machine' in the MMC certificate manager.
8. If the NPrinting server is NOT secured with an 3rd party certificate, do this with a supported browser:
   • you MUST log into the NPrinting server first,
   • then open a new tab in the same browser.
   • Finally, open the QlikView Accesspoint
   • Open the On-Demand Components.

To verify that the thumbprint in the ON Demand installation matches the 3rd party certificate thumbprint installed on the QV accesspoint server:

See image below:

Path to the On-Demand .json file on the QV IIS server where the On-Demand components is as follows: 

C:\Program Files\QlikView\Server\QlikViewClients\QlikViewAjax\htc\addons

Cause:

• NP service account is not a domain user and or not configured correctly for use with NPrinting
• Users are logging into the QlikView Access point without logging into NPrinting Web Console first. (This is required when the NP web console is not secured with a valid 3rd party certificate. See related information section below for details).
• 3rd party certificates  may be expired (if applicable)

Related Information:

• Troubleshooting QlikView On Demand with NPrinting ... - Qlik Community - 1759095