/datastudio/community?hl=en
This content is likely not relevant anymore. Try searching or browse recent questions.
Access BigQuery row-level filtered table from Data Studio
0
I have a row-level access filtered table on BigQuery. A set of Google groups have access to certain rows of that table according to the country each group belongs. The row-level filters are created like this:

CREATE OR REPLACE ROW ACCESS POLICY digital_disconnection_esp
ON `myproject.mydataset.mytable`
GRANT TO ("group:digital-disconnection-esp.group@midomain.com")
FILTER USING (country="ESP");

At the same time, I have a report on Data Studio which queries that table. The access to the report is managed through groups, so depending on the group the user accessing the report is, the report will show the data corresponding to the country assigned to that group. For this, I changed my BigQuery connectors so that they use the report viewer credentials to access the table.

The row-level filter is working propertly. We have checked that the report shows only data of the country corresponding to the group we are at. However, this only works if the user accesing to the report is also assigned to the group providing admin priviledges on the project the datasets are contained. When a non-technical employee access the report, as Data Studio uses the report viewer credentials to access the tables and he has not admin permissions on the project, the report shows blank.

I have tried:

  • Giving the bigquery.dataViewer and bigquery.filteredDataViewer roles at a dataset level to each group.
  • Giving the bigquery.dataAdmin role at a dataset level to each group. 
  • Giving the Data Studio service account gcp-sa-datastudio.iam.gserviceaccount.com those three roles. I was not even able to do it since an error message saying Email addresses and domains must be associated with an active Google Account or Google Apps account. appears. It does not make sense that I have to provide the Data Studio service account those roles as it is supossed to already have them.

None of the above attemps worked. What am I missing?
Details
Pinned
Locked
Latest Update Latest Updates (0)
Relevant Answer Relevant Answers (0)
No replies yet.
This question is locked and replying has been disabled.
Discard post? You will lose what you have written so far.
Write a reply
10 characters required
Failed to attach file, click here to try again.
Discard post?
You will lose what you have written so far.
Personal information found

We found the following personal information in your message:

This information will be visible to anyone who visits or subscribes to notifications for this post. Are you sure you want to continue?

A problem occurred. Please try again.
Create Reply
Edit Reply
This will remove the reply from the Answers section.
Notifications are off
Your notifications are currently off and you won't receive subscription updates. To turn them on, go to Notifications preferences on your Profile page.
Report abuse
Google takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Go to the Legal Help page to request content changes for legal reasons.

Reported post for abuse
Unable to send report.
Report post
What type of post are you reporting?
Google takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Go to the Legal Help page to request content changes for legal reasons.

Reported post for abuse
Unable to send report.
This reply is no longer available.
/datastudio/threads
//accounts.google.com/ServiceLogin
You'll receive email notifications for new posts at
Unable to delete question.
Unable to update vote.
Unable to update subscription.
You have been unsubscribed
Deleted
Unable to delete reply.
Removed from Answers
Removed from Updates
Marked as Recommended Answer
Marked as Update
Removed recommendation
Undo
Unable to update reply.
Unable to update vote.
Thank you. Your response was recorded.
Unable to undo vote.
Thank you. This reply will now display in the answers section.
Link copied
Locked
Unlocked
Unable to lock
Unable to unlock
Pinned
Unpinned
Unable to pin
Unable to unpin
Marked
Unmarked
Unable to mark
Reported as off topic
Known Issue
Fixed
Marked Fixed
Unmarked Fixed
Unable to mark fixed
Unable to unmark fixed
/profile/0
false
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
102097
false