Collections, Analytic App, Saved Credentials, and Data Connections

Hello,

I have a question about the functionality of Analytic Apps in Collections. I want to make an app for a finance employee so they can get data without me clicking 'Run'.

Does this finance user need to be granted access to the Gallery Data Connection in order to use the Analytic App?

- The app is using saved credentials that have access to the database.

- The app is in a collection

- The user does not have designer

I thought that because the workflow had a saved credential they wouldn't need access to the Data Connection, but currently they receive an error when they don't have access.

My concern is that if users need access to the data connection to run an app, what happens when I make an app for users with designer licenses. They would have unfettered access to the data connection if I tried to give them access to the app.

Is my server / app just set up wrong?

Thanks,
Ken

Gallery

Apps

Database Connection

Accepted answers

Thableaus

@kgalbert

You said that the workflow credentials that were set up for this app were of a Service Account, is that right?

Did you check the alias xml file as an asset when you uploaded the workflow?

Check this FAQ post, it explains how the permissions check for the Gallery Data connections work.

https://community.alteryx.com/t5/Alteryx-Server-Knowledge-Base/Gallery-Data-Connections-FAQ/ta-p/452293

All comments

Thableaus

Hi @kgalbert

Which database are you using? And which kind of authentication are you using? How's the data connection setup?

The app is run under the "Run As" that you define in the System Settings if it doesnt use workflow credentials.

kgalbert

Thanks for responding.

It's an Oracle database with an OCI connection string with the username and password saved in it.

When I save the workflow to the gallery, I click 'Set workflow credentials' and then 'Always run this workflow with these credentials' and select the service account that has access to the database.

I'm sort of seeing how the connection is separate from the workflow 'run as' credentials.

So maybe what I'm trying to do isn't possible with an Oracle DB?

Quick Links

This months top contributors

mceleavey 383

mbarone 337

Hollingsworth 335

LanisC 335

Aguisande 317