Roles and permissions

Access to Looker Studio assets (reports, data sources, and explorations) is based on the Google Cloud Identity and Access Management (IAM) system. With IAM, you manage access to Looker Studio assets by assigning users to a predefined role. A role is a collection of permissions that allows users to perform certain actions while preventing them from performing other actions.

Learn more about IAM.

Tip: Roles and permissions don't govern who can actually see the data provided by a data source. This is governed by data credentials.

Basic roles

The following basic roles are available to all Looker Studio users. Basic roles apply to individual assets. For example, you can grant a user the editor role on a particular report and the viewer role on the data source added to that report.

Role	Capabilities
Viewer	Can view the report and interact with controls Can view the data source schema
Editor	Same as viewer, plus: Can modify the report Can modify the data source Can share the report Can share the data source
Owner	Same as editor, plus: Can delete the report or data source Can make someone else the owner of the report or data source

See role details for more granular capabilities.

Team workspace roles

The following roles are available to users of Looker Studio Pro whose organization has a Google Cloud project linked through the Admin console. Team workspace roles are applied at the workspace level and govern access to the assets contained in that workspace.

Role	Capabilities
Contributor	Can view and edit existing assets in the team workspace Can create new assets in the team workspace Can view workspace members and roles Can add editors and viewers directly to an asset inside a workspace Can restore assets from the Trash Can move assets from My workspace to a team workspace
Content manager	Same as contributor, plus: Can add/remove contributors to/from the workspace
Manager	Same as content manager, plus: Can add/remove contributors and content managers to/from the workspace (Note: a workspace must have at least one manager) Can change member access levels for a team workspace Can permanently delete a team workspace Can move assets out of a team workspace to My workspace Can transfer assets from one team workspace to another team workspace (requires one of the three roles in the target team workspace)

Role details

The following tables show the granular capabilities of each role according to feature area.

Tip: To see individual IAM permissions visit IAM permissions reference and search for datastudio. Note however that Looker Studio does not support custom roles.

Feature area: reports

Capability	Basic roles			Team workspace roles
	Viewer	Editor	Owner	Contributor				Content manager	Manager
Create / delete the report			✔	✔				✔	✔
View the report	✔	✔	✔	✔				✔	✔
Copy the report	✔	✔	✔	✔				✔	✔
Download data from the report	✔	✔	✔	✔				✔	✔
Modify the report		✔	✔	✔				✔	✔
Use and modify data from added data sources		✔	✔	✔				✔	✔
Add and remove data sources		✔	✔	✔				✔	✔
Prevent report copying for viewers			✔	✔				✔	✔
Prevent report sharing for viewers			✔	✔				✔	✔
Prevent downloading data for viewers			✔	✔				✔	✔
Transfer ownership			✔	n/a				n/a	n/a

Note: The roles capabilities listed above refer specifically to reusable data sources. For embedded data sources, people with editor role on the report can view and modify the data source.

Feature area: data sources

Capability	Basic roles			Team workspace roles
	Viewer	Editor	Owner	Contributor	Content manager	Manager
Add the data source to reports	✔	✔	✔	✔	✔	✔
View the data source schema	✔	✔	✔	✔	✔	✔
Modify the data source		✔	✔	✔	✔	✔
Copy the data source	✔	✔	✔	✔	✔	✔
Change data source credentials		✔	✔	✔	✔	✔
Prevent data source copying		✔	✔	✔	✔	✔
Transfer ownership			✔	n/a	n/a	n/a

Feature area: share, move, and delete

These capabilities apply to both reports and data sources.

Capability	Basic roles			Team workspace roles
	Viewer	Editor	Owner	Contributor	Content manager	Manager
Share the asset directly		✔	✔	✔	✔	✔
Stop sharing the asset directly		✔	✔	✔	✔	✔
Move the asset to the Trash			✔		✔	✔
Permanently delete the asset			✔			✔

Related resources

• About team workspaces