user_attribute array in access_grant

Our clients can have an array of one to many personas, e.g. Accountant, Department Manager, Owner, etc.  We want to apply access_grants to allow certain personas access to see certain explores.  The examples I've seen for applying this level of access apply the permission like this:


access_grant:  can_access_explore_one {
user_attribute: persona
allowed_values: [ "Accoutant", "Owner" ]
}

But this approach requires single values to reside in the persona user_attribute. Is it possible to pass in an array of values via SSO embed to make this work?

Alternatively, I have tried to apply multiple required access grants, such as the following:

required_access_grants: [is_accountant, is_owner] 

but this approach also fails because an "and" condition is applied, e.g. the user must be an accountant AND an owner, when what I am trying to do is give either persona this access.

What is the best way to achieve this without coupling looker access logic to our embedding application to sort out the appropriate user attributes?

0 0 73
0 REPLIES 0
Top Labels in this Space
Top Solution Authors