Supercharge Your Looker Admin Team: Introducing Advanced Granular Permissions

[Maire_Newton]

Admins in Looker hold the keys to the entire Looker kingdom; but not all admin tasks should require help from a Looker admin. For example:

• Developers building embedded content need to be able to create and test signed URLs and manage themes and other embed settings
• Team leads need to be able to manage groups and roles for people within their team or department

Looker's new advanced granular permissions can help streamline your workflows, boost security, and get more done faster. Delegate specific admin tasks to the right teams without compromising control.

Feature Benefits

These new, more granular permissions enable admins to empower other types of users to manage and control elements of the Looker experience. This can provide benefits such as:

• Embed Efficiency: Embed developers can now independently setup and test Embed SSO URLs without relying on an instance admin. This includes management of embed settings, themes, and private labels.
• Decentralization of Admin Tasks: Large BI teams can assign management of user attributes, groups, and roles to power users, freeing up your admins for the big picture stuff.
• Enhanced Security: Admins can maintain a secure Looker environment while still empowering different teams to do their best work. They no longer have to give out all of the keys to the kingdom in order to delegate capabilities.

Feature Snapshot

Some of these new permissions are nested within the existing permission hierarchy in Looker. For example, in order for a user to be granted the ability to manage groups, they have to have the ability to see users in Looker. And to be able to manage roles, they have to have to be granted the ability to manage groups.

Others, like the new embed permissions, are top level permissions that do not require other access. An embed developer can be granted the ability to manage embed settings and themes without gaining access to any data.

Check out our documentation to see the full list of permission options available. And if you are starting to use these new permissions, be sure to let us know how it’s going in the comments!