Stratified access to the Looker dashboard for different users.

I have a dashboard in Looker that shows data from several business units of a company. I would like to set up stratified access so that the leaders of each business unit (each business unit has 2 leaders) can access the dashboard filtered only for their business unit. How can I do this? (without LookML)

Easiest is probably to use the Filter by Email feature in combination with an access control list (since the access is more than one user per business unit). You can learn more about this approach here: https://support.google.com/looker-studio/answer/9888200?hl=en

If your data is in BQ, you can also use the @ds _USER_EMAIL parameter in a custom query to get creative with access. More here: https://support.google.com/looker-studio/answer/9713766?hl=en#bigquery

Hope that’s helpful!

Laura

1 Like

I’ve studied this article, but I’m having trouble with step 4.

“Step 4: Blend the ACL table with the data table Finally, blend the data table with the ACL table. Since we want to effectively add the sales rep email as a column to the data table, we will start from the data table and then left-join the ACL table”

To do this, when configuring the left-join the ACL table, which fields should I indicate?

All columns in my data table and then the email column from the ACL table? Wouldn’t that create a one-to-one row-email relationship instead of one-to-many?

You’ll put your data table in the blend first, then left-join by business unit to the ACL table, bringing in the email field. (In your case, the ACL table would probably have columns of Business Unit and Email, with multiple rows per business unit for each email address that should have access.)

You’re right in that the resulting data source will be a one-to-one email relationship for each row, which will allow you to use the Filter by Email feature with the data source. Filter by Email doesn’t work if the email field contains multiple emails. My comment about one-to-one vs. one-to-many was just because you have TWO leaders in each business unit. So you need a data source that has a row for each leader, essentially doubling the number of rows. (If you only had one leader per business unit, you wouldn’t need to blend this way…you’d just need to get the email address into each row.) Think of it as creating a custom set of data for each business unit leader, but it’s all in the same data source. Let me know if that still doesn’t make sense!

Laura

Perfectly understood now. Thank you very much for your explanations, the solution is very clear.

Maria