mcpField
L
lookml-access-grants

lookml-access-grants

github.com/lkrdevSecurity1657 installsUpdated 22w ago
Repository

About lookml-access-grants

A skill for developers configuring LookML access controls across models, Explores, views, and fields. It explains how grants connect user attributes to allowed values and how requirements combine across objects.

Key features

  1. 01Define model-level access grants
  2. 02Apply grants to Explores, joins, views, or fields
  3. 03Match allowed values to user attributes exactly
  4. 04Understand how multiple grants combine

Use cases

  1. 01Restrict access to finance views
  2. 02Set field-level access for salary data

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/lkrdev/lookml_skills --skill lookml-access-grants

After installing, type/lookml-access-grantsin Claude Code to confirm it loaded.

Details

From the project README

Instructions

  1. Define Access Grant:
    • Defined at the Model level.
    • Links a user_attribute to a set of allowed_values.
  2. Apply Access Grant:
    • Use required_access_grants: [grant_name] at the Explore, Join, View, or Field level.
    • User must match all listed grants to see the object.
  3. Best Practices:
    • Exact Match: allowed_values must match the user attribute value distinctively (no wildcards/partial matches).
    • Additive: Grants are additive. If a View requires Grant A and a Field requires Grant B, the user needs both to see the field.

Examples

Basic Access Grant

# In model file
access_grant: can_view_finance {
  user_attribute: department
  allowed_values: ["finance", "executive"]
}

# In view file
view: finance_data {
  required_access_grants: [can_view_finance]
  # ...
}

Field-Level Security

dimension: salary {
  type: number
  sql: ${TABLE}.salary ;;
  required_access_grants: [can_view_finance]
}

Comments

Markdown supported