The resource filters needed to start a task and check its status using the /qrs/executionsession/ and /qrs/executionresult endpoints as seen under Task: Start are not all documented as seen under Available resource filters, which may make creating custom rules difficult. Using RootAdmin works, but this cannot be used in scenarios where only the least amount of permissions are needed.
Environment:
Qlik Sense Enterprise on Windows
, all versions
Cause:
Undocumented resource was needed to call the endpoints.
Resolution:
These steps will create a rule capable of running the endpoints listed under Task: Start with the minimum of rights needed.
1. Create a new security rule called TaskAdmin.
2. For the Resource filter, add: App_*, ReloadTask_*, ExecutionResult_*, ExecutionSession_*
3. For Actions, check: Read and Update.
4. For Conditions, put: ((user.roles="TaskAdmin"))
5. Save the rule.
