This integration is provided as an Open Authorization API (OAA) connector package. Download the source code on GitHub.
OAA connector for Google Looker focusing on Looker Models and Connections. Discovers Looker users and groups and provides authorization data for the Looker Models and database connections users can access based on their Looker roles.
This connector uses the OAA Application template. The following table shows how Looker entities are mapped to the template.
Users
Local User
Group
Local Group
Role
Local Role
Model Set
Custom Resource model_set
Model
Custom Sub-resource model under model_set
Connection
Custom sub-resource connection under model
Looker connector extracts the following attributes:
User:
id - Looker ID
verified_looker_employee - Boolean for user is identified as an employee of Looker who has been verified via Looker corporate authentication
presumed_looker_employee - Boolean for User is identified as an employee of Looker
is_active - Status of Looker account
Group:
id - Looker ID number
Model Set:
id - Looker ID number
built_in - Boolean for if model set is built in
all_access - Boolean if the model set is configured to include all models
Connection:
dialect - JDBC dialect connection is configured as
host - Database connection host
username - Database connection user name
Generate a Looker API3 key for a user with sufficient privileges to see all users, roles and models. The following scopes are required:
see_users
manage_models
Generate an API key for your Veza user. API keys can be managed in the Veza interface under Administration -> API Keys. For detailed instructions consult the Veza User Guide.
With Python 3.8+ install the requirements either into a virtual environment or otherwise:
pip3 install -r requirements.txtExport the Veza API keys and Looker connection information to the OS environment.
export VEZA_API_KEY="XXXX...."
export LOOKERSDK_BASE_URL="https://<customername>.cloud.looker.com"
export LOOKERSDK_CLIENT_ID="XXXX...."
export LOOKERSDK_CLIENT_SECRET="XXXXX....."Run the connector
./oaa_looker.py --veza-url https://<customer>.vezacloud.comOptionally export the Veza URL to the environment as VEZA_URL and run with no parameters required.