This page lists the IAM roles and permissions for Looker. To search through all roles and permissions, see the role and permission index .
Looker roles
Looker Admin
( roles/
)
Full access to all Looker resources.
looker.*
-
looker.backups.create -
looker.backups.delete -
looker.backups.get -
looker.backups.list -
looker.instances.create -
looker.instances.delete -
looker.instances.export -
looker.instances.get -
looker.instances.import -
looker.instances.list -
looker.instances.login -
looker.instances.update -
looker.locations.get -
looker.locations.list -
looker.operations.cancel -
looker.operations.delete -
looker.operations.get -
looker.operations.list
resourcemanager.projects.get
resourcemanager.projects.list
Looker Instance User
( roles/
)
Access to log in to a Looker instance.
looker.instances.get
looker.instances.login
resourcemanager.projects.get
resourcemanager.projects.list
Looker Service Agent
( roles/
)
Gives the Looker service account permission to manage customer resources
bigquery.config.get
bigquery.datasets.get
bigquery.jobs.create
bigquery.models.export
bigquery.models.getData
bigquery.models.getMetadata
bigquery.models.list
bigquery.tables.create
bigquery.tables.createSnapshot
bigquery.tables.export
bigquery.tables.get
bigquery.tables.getData
bigquery.tables.list
compute.globalAddresses.get
looker.backups.create
looker.instances.get
resourcemanager.projects.get
serviceusage.services.use
Looker Viewer
( roles/
)
Read-only access to all Looker resources.
looker.backups.get
looker.backups.list
looker.instances.get
looker.instances.list
looker.instances.login
looker.locations.*
-
looker.locations.get -
looker.locations.list
looker.operations.get
looker.operations.list
resourcemanager.projects.get
resourcemanager.projects.list
Looker permissions
looker.backups.create
Owner
( roles/
)
Editor
( roles/
)
Looker Admin
( roles/
)
Service agent roles
- Looker Service Agent
(
roles/)looker.serviceAgent
looker.backups.delete
looker.backups.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
Looker Admin
( roles/
)
Looker Viewer
( roles/
)
looker.backups.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Looker Admin
( roles/
)
Looker Viewer
( roles/
)
looker.instances.create
looker.instances.delete
looker.instances.export
looker.instances.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
Looker Admin
( roles/
)
Looker Instance User
( roles/
)
Looker Viewer
( roles/
)
Service agent roles
- Looker Service Agent
(
roles/)looker.serviceAgent
looker.instances.import
looker.instances.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Looker Admin
( roles/
)
Looker Viewer
( roles/
)
looker.instances.login
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
Looker Admin
( roles/
)
Looker Instance User
( roles/
)
Looker Viewer
( roles/
)
looker.instances.update
looker.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
Looker Admin
( roles/
)
Looker Viewer
( roles/
)
looker.locations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Looker Admin
( roles/
)
Looker Viewer
( roles/
)
looker.operations.cancel
looker.operations.delete
looker.operations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
Looker Admin
( roles/
)
Looker Viewer
( roles/
)
looker.operations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Looker Admin
( roles/
)
Looker Viewer
( roles/
)
