Looker user permissions

[zohar]

Hi,

I would like to restrict access to a specific Explore in Looker for certain users. These users should still be able to view and interact with dashboards or Looks built on top of this Explore, but they should not have the ability to access  the Explore directly.

Is there a way to achieve this using Looker’s permissions settings or any other recommended approach? I would like to ensure that the restriction applies to only one specific Explore (or model) and not globally to all Explores. Ideally, users should also not be able to "Explore from Here" from dashboard tiles, but only for the restricted Explore.

[GavinW · Accepted solution]

Access to data is controlled at the model level. So you could create a new model with this single explore in it and only give access to this model to the specific users you want to be able to see it. 

In addition, the explore permission is model specific as you can see here. This means that, if you want this subset of users to be able to see the data but not explore it, you could create a specific role that combines a permission set without the 'explore' permission with access to this specific model only.

[zohar]

@GavinW  -Thank you so much for your detailed response! Regarding the second solution you suggested, I want to make sure I understood correctly—can I create two different permission sets for two different roles and use the same model so that I can have different permissions for different users?

[GavinW]

Yes - a 'role' is a combination of a model set and a permission set. So you can give different groups (or users) different roles in relation to the same model.