Looker Capabilities
Last updated: October 8, 2024
After this article...
You'll understand the capabilities our Looker integration provides, and how Lumos interacts with the Looker API.
View users
The mapping between Looker user statuses and Lumos user account statuses is below.
Looker User Status | Lumos Account Status |
The user is not disabled and can sign into Looker outside of the embedded user flow. | Active |
The user is disabled, or can only log into Looker as an embedded user. | Suspended |
deleted (Looker no longer returns a user) | Deprovisioned |
Looker API endpoint: https://developers.looker.com/api/explorer/4.0/methods/User/all_users
We use the "is_disabled" flag to determine if they're disabled, and look for the existence of credentials outside of "embed_credentials" to determine if the user can log in outside of the embedded user flow.
View a user's entitlements
Lumos can retrieve the following user entitlements from Looker.
Role - The Looker roles to which the user is assigned.
Looker API endpoints:
https://developers.looker.com/api/explorer/4.0/methods/Role/all_roles
https://developers.looker.com/api/explorer/4.0/methods/Role/role
View a user's last login
In Lumos, the Last Login value represents the last time the user logged into Looker.
Looker shows a "logged_in_at" for each authentication method, so Lumos shows you the most recent one.
Looker API endpoint: https://developers.looker.com/api/explorer/4.0/types/Group/User (we iterate over the "credentials_" objects to get the latest "logged_in_at" value)
Suspend a user
AppStore | Offboarding | Access Reviews | License Management |
N/A | ✅ | ✅ | ✅ |
In Lumos, suspending a Looker user marks their Account Status as "Suspended".
In Looker, this action disables the user. This prevents them from logging in, but the user's usage history and personal content is retained.
This action reclaims a license in Looker.
Looker API endpoint: https://developers.looker.com/api/explorer/4.0/methods/User/update_user (we update the "is_disabled" flag to "true").
Deprovision a user
AppStore | Offboarding | Access Reviews | License Management |
N/A | ✅ | ✅ | ✅ |
In Lumos, deprovisioning a Looker user marks their Account Status as "Deprovisioned".
In Looker, this action permanently deletes the user and their data (including Looks) from Looker. Make sure this data has been transferred before deleting a user, or suspend their account instead.
This action reclaims a license in Looker.
Looker API endpoint: https://developers.looker.com/api/explorer/4.0/methods/User/delete_user