QPR Knowledge Base 2022.1

In multi-tenant environments, there is a need to prevent users from one organization to see users from other organizations in user selection lists and dialogs.

For storing the organization information, there is a new "Organization" field for QPR User Management System users. The value can be set in the User Management Client and also via a new Organization read & write attribute supported by the the QPR WebServices API interface from an UM (User Management System) object.

The organization field value can also be automatically retrieved for LDAP users and for users authenticating via the generic single-sign-on functionality, at the time when a new LDAP/SSO user logs in MEA and is automatically created to QPR User Management System.

For LDAP import and synchronization, any LDAP setting group defined in the QPR_Servers.ini can have a new attribute mapping definition OrganizationAttribute. The default value is "Company", which is the field name used in active directory for the user's organization.

System administrator users always see all other users.

For others than system administrators, users from other organizations are hidden in the user lists in the user interface if the HideUsersFromOtherOrganizations setting is enabled. Only those users that have exactly the same value in their organization field as the current user are shown. This also applies to an empty value, i.e. users with empty organization field only show other users with empty organization field. The comparison is case-sensitive.

As of the scope of this feature, the hiding of users apply to:

•All user selection views in QPR Portal.

•User Management Client.

•In QPR Modeling Client, in all views/dialogs where normally a list of all EA/PD users is visible.

•In QPR Metrics Client, in all views/dialogs where normally a list of all QPR Metrics users is visible.