Question

Role that only can Add Users, Edit User Attributes, without giving full Admin access

  • 4 January 2022
  • 4 replies
  • 37 views

Hello,

 

I might be missing it, but is there a way to have a role that is truly like a lower level administrator. We want someone from our onboarding team to handle adding new users, assigning them user attributes, etc. without also getting full access to the Look ML code. Is this possible?


4 replies

Userlevel 6
Badge +1

The only permission that you could use is see_users

Unfortunately, there’s no more granular split about certain user actions but perhaps it would work for your case

Userlevel 6
Badge

As Dawid has mentioned there is almost no granular split for admin actions, take a read of this though as it could most probably give you a way to do what you need with some scripting: 

 

Userlevel 3

I wrote a Cloud Functions that automates the process of creating new Lookers user from reading an email address from a Google Sheet using Looker API. You can expand the use case by adding user attributes into the script. 


Script: https://github.com/looker-open-source/sdk-codegen/tree/main/examples/python/cloud-function-user-provision

 

The endpoint to update user attributes https://developers.looker.com/api/explorer/4.0/methods/UserAttribute/update_user_attribute

I wrote a Cloud Functions that automates the process of creating new Lookers user from reading an email address from a Google Sheet using Looker API. You can expand the use case by adding user attributes into the script. 


Script: https://github.com/looker-open-source/sdk-codegen/tree/main/examples/python/cloud-function-user-provision

 

The endpoint to update user attributes https://developers.looker.com/api/explorer/4.0/methods/UserAttribute/update_user_attribute

 

This is great. I Will take a look. Guessing I could even have a Google Form they fill out that pushes to a Google Sheet it picks it up from. I will have to play around with it but I’m using Groups with attributes to assign User Attributes to users adding users to a Group.

Reply