How to use
- Copy the installation command and review the source package before installing it in your own agent environment.
- Check the source document for required tools, credentials and supported hosts.
- Describe your input and desired deliverable; review the output against the source material.
npx skills add https://github.com/looker-open-source/looker-skills --skill lookml-access-grantsBefore you start
- Installation does not include a model subscription, API allowance or permission to access your files.
- Repository stars and installation counts describe activity, not an independent quality or security test.
Original skill document
Rendered from the source repository. Headings, examples, code, tables, links, and referenced images are preserved.
Instructions
- Define Access Grant:
- Defined at the Model level.
- Links a
user_attributeto a set ofallowed_values.
- Apply Access Grant:
- Use
required_access_grants: [grant_name]at the Explore, Join, View, or Field level. - User must match all listed grants to see the object.
- Best Practices:
- Exact Match:
allowed_valuesmust match the user attribute value distinctively (no wildcards/partial matches). - Additive: Grants are additive. If a View requires Grant A and a Field requires Grant B, the user needs both to see the field.
Examples
Basic Access Grant
lookml
# In model file
access_grant: can_view_finance {
user_attribute: department
allowed_values: ["finance", "executive"]
}
# In view file
view: finance_data {
required_access_grants: [can_view_finance]
# ...
}Field-Level Security
lookml
dimension: salary {
type: number
sql: ${TABLE}.salary ;;
required_access_grants: [can_view_finance]
}
