Alteryx Server Ideas

I would like the ability to add Groups to a collection as well as individual users. This would make things a lot easier for situations where large sets of users needed to be added to a collection at once, or removed at once.

It used to be possible to create a robust user profile within the gallery, with many additional user details fields available. However all have been taken away leaving only a name and email address as a user profile.

Please bring back those user details as having additional information about the user always beneficial. If internal to the company, sometimes I need to know what department they are from or what office. And if external to the company, I need to know what organization they are from.

Having no additional user information can cause a lot of confusion, especially if any two users share a name since I don't know if it's the same user with a new email, or a different user completely.

Thanks.

At some point we would like Alteryx Gallery to support SSO via SAML and Authorization via AD groups. The way I want is to have Authentication via SAML and Authorization via AD groups. For instance one of our apps Tableau: It does authentication via SAML (SSO) and for authorization, we import AD groups into Tableau thrice a day(stores the groups in a .xml file), once the groups are in the Tableau, we secure the objects within Tableau using that LDAP groups (which kind of become local groups after import). Basically the userid after the successful authentication step is used by the app for authorization.

I just stated Tableau as one of the ways to implement Authentication and Authorization for an enterprise app. If Alteryx Gallery needs to be an enterprise app, you will need to look into this idea. 

Thanks
Raj

We have configured the service account for Alteryx services on workers, controllers and Gallery. Kindly go through the below problem statement and current scenario and help to provide solution.

I will appreciate if we can setup a 30 minutes call and discuss on it.

Purpose/Current Design :

1. Our purpose was to on board the account in EPV-AIM/gMSA solution so that password won’t be hard-coded anywhere in the config for service LAN account.
2. Use same LAN service account to run the workflow on workers and write the output at destination paths [ Shared paths, Mailboxes]
3.  

Problem Statement  :

As we have added service LAN account  in multiple AD groups [ global and local ] it has become member of 440+ groups which has resulted in the approx.. token size to 8421.

Active directory has a limit of having approx.. token size to 10000 (10k) for LAN accounts and after that it will fail to authenticate with AD ; which will result in failure of starting Alteryx services.

Please refer below link to know what exactly issue we are facing and looking solution from Product team[Alteryx].

https://www.jijitechnologies.com/blogs/active-directory-token-bloat

We are looking from the Alteryx team :

1. Find a solution and provide some enhancement where we can use multiple (more than one) LAN accounts to run the workflows.
2. In Large scale when we are running workflows of different team’s it is obvious that LAN ID will be member of multiple AD groups and it will reach to Token bloat threshold.
3. We are looking something which can be provided as solution within the same setup to add multiple accounts or any other solution .

We already explored the option you suggested [https://help.alteryx.com/current/server/credentials] but as per our firm’s password policy we cannot save/use/withdraw privilege account passwords.

Because if we go with the suggested option we have to add the particular accounts in Windows server privilege group [ Log on as service, App_Security Logon locally and run batch job].

To meet compliant policy ; Any account which is privilege should be considered as app to app account and it should be integrated with Microsoft’s gMSA or CyberArk’s EPV-AIM solution to be on boarded account in vault. [ No human interaction with account ]

Feel free to reach out to me for any additional clarifications.

It would be great if we can set the priority of a job when scheduling a workflow through either the Designer UI or through AlteryxService addtoqueue command

In my organization we primarily schedule jobs through these avenues and this would bring them up to par with the scheduling capabilities of Gallery

For example:

AlteryxService https://help.alteryx.com/current/server/alteryxservice-commands

addtoqueue=path,host[:port],secret[,true]

^ add an optional parameter that takes enum value {Low, Medium, High, Critical}

Designer UI

Add a dropdown that takes an enum {Low, Medium, High, Critical}

I know the Alteryx server supports auto-scaling up and out as of now. Alteryx Servers should also support auto-scaling down and in.  

Alteryx Server API should be allowed to publish the workflow in the gallery. 

Our corporation has multiple private studios set up (depending on various teams within our infrastructure); when we provide a user access to one private studio, they cannot be part of another private studio (to update/add/remove their workflows); they can view/see them within the collections, but cannot action them.

If possible within the Alteryx Server interface, could users be added to multiple/different private studios (and be authorized for all), and have a toggle that would allow them to switch back and forth? This would alleviate a lot of our issues we have with users reporting/being involved with multiple teams (who are requiring access to different private studios).

Can we add an ability to manually adjust the order of workflows in a collection? I don't think we should have to go and click the column to sort each time if we want them in alphabetical order. It looks better for the end user to have everything nice an arranged when you have multiple processes in each collection.

Links included in the notification emails sent to users (e.g. links to collections/workflows in our Private Gallery) or copied from the browser address bar only works for public workflows or for workflows in your private studio.

If the workflow is in a collection shared with you, clicking on the link takes you to what seems to be the gallery page for the workflow asking you to sign in, but after you sign-in you are redirected to the gallery home page and not back to the workflow page.

The same occurs regardless if you're already signed-in or not.

This was related to support case: 00352021

It's been mentioned previously but I haven't seen an official idea posted. The width of the "Name" column on the Collections page needs to be adjustable to allow users to see the full name. Since we have many distinct areas, we use naming conventions to help organize different groups' Collections. But, even as short as we try to keep it the full names don't appear most of the time. At the very least, increase the default width because cutting the names off after 24 characters is simply too short.

Apparently I click too fast sometimes when saving a project, but there are a number of times where the workflow name hasn't populated when saving to the gallery and it ends up saving a blank file name. This is a pain because I can't do anything with the one in the gallery because there is nowhere to click on it, so I can't use the replace function and have to re-save it and re-add it back into any collections that it was in.

I realize that I just need to slow down, but I do this frequently enough where it absolutely drives me crazy. Being able to change file names in the gallery would be a big plus instead of just using the replace option.

Alteryx server APIs are associated with Subscription ( private or shared studio) and an Artisan could be part a of either a private or shared studio. In an enterprise environment you want the ability of scheduling workflows from private studio ( automation of private workflows) and shared studio ( production automation). You can achieve both in an enterprise environment with governance and control if Artisans ( along with Curators) have the ability to switch subscriptions. This will enable them to publish workflow in their private studio for automating personal workflows and in shared studio for production automation. In this way admin or curator still control the data connection creation and assignment , run as credentials but switching subscriptions can be provided to Artisans as well.

Shared studio's private api key and secret can be setup in other scheduling systems such as Ctrl-M and individual leaving or moving departments will not have any impact  on the scheduling configuration.

Within the Mongo database on the Alteryx Server, when using WinAuth,  if you use AD Groups for Permssioning, there is no direct way within the Mongo database to go from the AD Group to the User table.  This is important if you need to report on who, base upon their AD group membership with their associated role is a user.  Example.  AD Group 'Example-AD -Group'  is assigned Permission Curator.  The AD Group contains user 'Jay Smith'.  'Jay Smith'  is on the user Collection.  activeDirectoryPermssions Collection  contains the Ad Groups and permissions.  But,  in order to connect the two collections,  you will need to go externally to define the AD Group memebership to join these two collections together.

The search for replacing a workflow is poor (and I get that it is probably challenging to write on the back end) but as a result even if I type in the exact title of the workflow (aka copy and paste) Alteryx replace can't find it. Not only does this mean I have multiple workflows with the same name running around (loads of fun with lack of version control) but it also makes this entire thing more frustrating every time I update a workflow (as normally this also means the scheduling of said workflow breaks).

It would be awesome if instead of having to search by title for your workflow that you wish to replace with if you could instead use the URL where Alteryx Gallery put the workflow and then there wouldn't be any confusions about which workflow and you wouldn't have to type.

*This is an idea from @riverotoledo_21 from the Portuguese Community*

• How to bring user’s variables/information that we want to use within the workflow that will be published in the Analytic App in the Gallery (For example, I believe that all “non-sensitive” information from MongoDB related to the Gallery actual session should become variables)

*This is an idea from @cneivam  from the Portuguese Community*

- Gallery in all supported languages

*This is an idea from @cneivam from the Portuguese Community*

• Can’t use CReW macros in Server

At present Gallery API events are captured without User details..

Eg:

if an Admin user changes the "Default permissions" under "Permissions" this will be captured as a galley API event in server Gallery logs..
but it will not capture the user details, who has changed the same..

Looking forward to a feature which can accommodate this..