Can you manually assign a role to a user that is not determined by the [SAML/LDAP] Group to Role mapping?

Knowledge Drop

Last tested: Jan 2019

No.

Roles will be overwritten for a user any time that user logs in with [SAML/LDAP]. So while it's technically possible to manually assign some roles while the user is currently logged in, those changes will be wiped each time the user logs in.

This content is subject to limited support.                

Comments

This is no longer true with the Advanced Role Management options introduced in Looker 7.6.  If you have Prevent Individual SAML Users from Receiving Direct Roles toggled on, then you will not be able to assign direct roles, and previously assigned roles will be overwritten on next login.  If this option is off, Looker admins can assign Looker roles directly to SAML users as if they were configured natively in Looker.

Version history
Last update:
‎04-05-2021 09:09 AM
Updated by: