Column level security in look ml

[omidos]

Hi Looker community

I would like to have column level security on Look ml per specific tenant id - what would the correct approach?

Thanks!

[jcdufault]

Hi, 

Few things you can look into.

• Access filters
• sql_always_where in your explore declaration

You will most likely need to make a user attribute and start limiting access to data one way or another with liquid templating.

You could even modify how a dimension is returned:

dimension: test_dimension {
    label: "Test"
    sql: {% if _user_attributes['access_level'] == 'full_access' %} ${TABLE}.my_column {% else %} NULL {% endif %}
}

[looker_ant]

Hey there! jcdufault is giving some good recommendations for masking column level data based on user attributes or using access filters for row level security.

I want to add that hiding columns/tables/explores from certain users is also achievable  using access_grants, required_access_grants, and user_attributes