Set sharing permissions for Looker Studio users

Supported editions for this feature: Frontline Starter, Frontline Standard, and Frontline Plus; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Essentials Starter, Essentials, Enterprise Essentials, and Enterprise Essentials Plus; Nonprofits; G Suite Basic and G Suite Business. Compare your edition

Asset owners can share their assets based on the permissions you set for their organizational unit or group. Typically, you choose permissions for organizational units or your domain. Then you can customize permissions for groups of users within or across organizational units.

1. Add an organizational unit for each department or domain. For steps, see Add an organizational unit.
2. Move users to your organizational units. For steps, see Move users to an organizational unit.
3. Set sharing permissions for each organizational unit using the instructions below.
4. (Optional) Set sharing permission for groups.

If asset owners move to different organizational units or groups, or if asset ownership transfers to someone in a different organizational unit or group, the asset's sharing permissions change to those of the new organizational unit or group. Also, reordering the priority of groups can change an asset owner's sharing permissions. Learn more about groups

Users can never share assets they don’t own beyond what is allowed for the asset owners. This is true even if users are in organizational units or groups with more permissive sharing settings.

You can restrict users from sharing or receiving Looker Studio assets outside your organization:

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to Menu  Apps > Additional Google Services > Looker Studio.

   Requires having the Service Settings administrator privilege.

3. Click Sharing settings.

4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

   Supported editions for this optional step: Frontline Starter, Frontline Standard, and Frontline Plus; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Essentials Starter, Essentials, Enterprise Essentials, and Enterprise Essentials Plus; Nonprofits; G Suite Basic and G Suite Business. Compare your edition

5. Under Sharing outside of your organization, turn sharing off, and select options:

   Option	Description
   OFF	Prevents users from sharing Looker Studio assets with people outside your organization through invitations, links, and email attachments.
   Allow users in your organization to access assets from users outside of your organization	(Optional) When unchecked, prevents users from: Opening assets that are shared with them by people in untrusted domains. If you check this box, users can open assets shared from outside your organization, but they can share within your organization only.

6. Click Save.

Supported editions for this feature: Frontline Starter, Frontline Standard, and Frontline Plus; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Essentials Starter, Essentials, Enterprise Essentials, and Enterprise Essentials Plus; Nonprofits; G Suite Basic and G Suite Business. Compare your edition

You can restrict file sharing to trusted domains only. To be trusted, domains must be Google Workspace domains.

Cloud Identity customers: If your organization has a mix of Cloud Identity and Google Workspace licenses for its users, the trusted domains configuration for Google Workspace users also applies to users with Cloud Identity licenses.

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. From the Google Admin Console home page, go to AppsAdditional Google servicesSettings for Looker Studio.
3. Click Sharing settings.

4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

   Supported editions for this optional step: Frontline Starter, Frontline Standard, and Frontline Plus; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Essentials Starter, Essentials, Enterprise Essentials, and Enterprise Essentials Plus; Nonprofits; G Suite Basic and G Suite Business. Compare your edition

   1. Under Sharing outside of your organization, turn trusted domains on and select options:

      Option	Description
      Trusted domains ON	Allows users in the specified organizational unit or group to share assets with people in external trusted Google Workspace domains.
      Allow users in your organization to access assets from users outside of trusted domains	(Optional) Enables users to: View or edit assets that are shared with them by people in untrusted domains. If you uncheck this box, users can access assets only if those assets are shared by people in trusted domains.

5. Click Save.

6. Add trusted Google Workspace domains. The list of trusted domains is automatically available to all organizational units and groups in your organization.

You can let users invite people outside your organization to access shared assets.

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. From the Google Admin Console home page, go to AppsAdditional Google servicesSettings for Looker Studio.
3. Click Sharing settings.

4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

   Supported editions for this optional step: Frontline Starter, Frontline Standard, and Frontline Plus; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Essentials Starter, Essentials, Enterprise Essentials, and Enterprise Essentials Plus; Nonprofits; G Suite Basic and G Suite Business. Compare your edition

5. Under Sharing outside of your organization, turn external sharing on:

   Option	Description
   EXTERNAL SHARING ON	Lets users invite people outside your organization to view or edit shared assets.

6. Click Save.

You can let users make Looker Studio assets public on the web.

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. From the Google Admin Console home page, go to AppsAdditional Google servicesSettings for Looker Studio.
3. Click Sharing settings.

4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

   Supported editions for this optional step: Frontline Starter, Frontline Standard, and Frontline Plus; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Essentials Starter, Essentials, Enterprise Essentials, and Enterprise Essentials Plus; Nonprofits; G Suite Basic and G Suite Business. Compare your edition

5. Under Sharing outside of your organization, turn public sharing on:

   Option	Description
   PUBLIC SHARING ON	Lets users select sharing settings that make files visible to the world as either public or unlisted files. Learn more about who links can be shared with. Note: this setting doesn't prevent reports from being shared externally via scheduled delivery.

6. Click Save.