Role that only can Add Users, Edit User Attributes, without giving full Admin access

Hello,

I might be missing it, but is there a way to have a role that is truly like a lower level administrator. We want someone from our onboarding team to handle adding new users, assigning them user attributes, etc. without also getting full access to the Look ML code. Is this possible?

0 4 425
4 REPLIES 4

Dawid
Participant V

The only permission that you could use is see_users

d85016b2-24cd-4db1-a3e9-b4c2bbf3f314.png

Unfortunately, there’s no more granular split about certain user actions but perhaps it would work for your case

IanT
Participant V

As Dawid has mentioned there is almost no granular split for admin actions, take a read of this though as it could most probably give you a way to do what you need with some scripting: 

https://community.looker.com/open-source-projects-78/introducing-madmin-for-looker-20897

I wrote a Cloud Functions that automates the process of creating new Lookers user from reading an email address from a Google Sheet using Looker API. You can expand the use case by adding user attributes into the script. 


Script: https://github.com/looker-open-source/sdk-codegen/tree/main/examples/python/cloud-function-user-prov...

The endpoint to update user attributes https://developers.looker.com/api/explorer/4.0/methods/UserAttribute/update_user_attribute

I wrote a Cloud Functions that automates the process of creating new Lookers user from reading an email address from a Google Sheet using Looker API. You can expand the use case by adding user attributes into the script. 


Script: https://github.com/looker-open-source/sdk-codegen/tree/main/examples/python/cloud-function-user-prov...

The endpoint to update user attributes https://developers.looker.com/api/explorer/4.0/methods/UserAttribute/update_user_attribute

This is great. I Will take a look. Guessing I could even have a Google Form they fill out that pushes to a Google Sheet it picks it up from. I will have to play around with it but I’m using Groups with attributes to assign User Attributes to users adding users to a Group.