NPrinting normal operation fails after upgrade to Qlik Sense April 2019 Patch 1

Frank_S · May 11, 2021 2:13:35 PM

NPrinting is not able to run verification, generate cache and produce reports based on NPrinting connections to Qlik Sense after the Qlik Sense server is updated
Error in NPrinting Logs: "Failed to open a resolver for connection" and "The remote server returned an error: (403) Forbidden"

Environment:

If no section access is used on the connection, set the NPrinting service user credentials as “Identity” in the NPrinting connection configuration
Set another user which is RootAdmin as the identity. This will resolve connection load problems
As an additional alternative, assign a “Analyzer access allocation” to the user which is set as identity on Nprinting connection. Assigning RootAdmin role is not necessary, but it would solve the issue as well.
If the connection is using section access and some of the recipients fail to receive the report, assign them a “Analyzer access allocation” in the QMC (as above).

NOTE:

Assigning “Professional access” license in Qlik Sense on the user identity use with the NPrinting connection will not resolve the issue. Why this is the case is currently unclear and investigation is ongoing.
The issue will not be visible if Qlik Sense still maintains the precedent “User access allocations” license model applied
We also recommend upgrading to the latest version of NPrinting (June 2019 and later versions) to resolve most similar NP connection issues where the QS token model is in place. (reference Defect ID OP-8899)

This happens exclusively when updating the Qlik Sense server to April Patch 1. (Qlik Sense June 2019 version is also impacted).
Qlik Sense must use the new licensing model which has “Professional access allocations” and “Analyzer access allocations” instead of the previous “User access allocations” model
Additionally, this behavior occurs when the user set as "identity" in the NPrinting connection:
1. Is not RootAdmin on the Qlik Sense server
2. Has no token access allocation (original license model)
3. is a recipient when using section access in the Qlik Sense application
Why this happened: a security check has been added to QRS APIs that NPrinting uses to fetch details about the Qlik Sense app). This, along with changed QS default permissions after the license model change, results in these QS API's becoming inaccessible to NPrinting as per the points mentioned directly above