Looker Model Row and Field Access Controls

What the Solution Is

This approach leverages Looker's native governance framework by combining role-based access control (RBAC), user attributes, and declarative LookML security parameters (access_filter and access_grant) to enforce granular data access.

How It Meets the Requirements

• Model-Level Access: Model sets group specific LookML models together. When combined with a permission set into a role and assigned to user groups, users are strictly prevented from viewing or querying models outside their assigned model set.
• Row-Level Security: The access_filter parameter binds an Explore dimension directly to a Looker user attribute (e.g., sales_region). When a user runs a query, Looker automatically injects a parameterized WHERE clause into the generated SQL, restricting row-level data access seamlessly.
• Field-Level Security: An access_grant defined at the model level checks a user attribute (e.g., department: finance). By applying required_access_grants on specific dimensions or measures, Looker hides those fields completely from unauthorized users in the field picker and prevents them from querying that data.

Key Advantages

• Centralized Administration: Access policies are defined declaratively in LookML and administered centrally via groups and user attributes.
• Single Source of Truth: Eliminates the need to create duplicate Explores or views just to hide sensitive columns or filter rows.
• SQL Injection Prevention: Built-in Looker parameters (access_filter) ensure that filtering cannot be bypassed or removed by report viewers or dashboard creators.
• Scalable Role Management: Assigning roles to groups rather than individual users prevents permission creep and simplifies onboarding.

Why This Is Optimal

This is the native, recommended architectural pattern in Looker for multi-tier access control. It fully satisfies model restriction, row restriction, and field restriction within a unified semantic layer without code duplication or database-side schema sprawl.