Knowledge Drop

Can you manually assign a role to a user that is not determined by the [SAML/LDAP] Group to Role mapping?

  • 5 April 2021
  • 1 reply
  • 62 views

Userlevel 5
Badge
  • Looker Staff
  • 173 replies

Last tested: Jan 2019

 

 

No.

Roles will be overwritten for a user any time that user logs in with [SAML/LDAP]. So while it's technically possible to manually assign some roles while the user is currently logged in, those changes will be wiped each time the user logs in.

 

This content is subject to limited support.                


1 reply

Userlevel 3

This is no longer true with the Advanced Role Management options introduced in Looker 7.6.  If you have Prevent Individual SAML Users from Receiving Direct Roles toggled on, then you will not be able to assign direct roles, and previously assigned roles will be overwritten on next login.  If this option is off, Looker admins can assign Looker roles directly to SAML users as if they were configured natively in Looker.

Reply