[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-25。"],[],[],null,["# Data credentials\n\n*Credentials* determine who can see the data that is provided by a data source. Looker Studio uses three types of data credentials:\n\n- *Owner's Credentials* let other users access the data by using the credential owner's authorization. Data sources that use this credential type have a credential owner who may be be a different user than the data source owner. The credential owner's data credentials are used to determine access to the data source's underlying data.\n- *Viewer's Credentials* rely on each individual report viewer's credentials to access the data.\n- *Service Account Credentials* rely on a special type of Google Account that represents a non-human user, which can be authenticated and authorized to access data.\n\nSet credentials for a data source\n---------------------------------\n\nYou can set data credentials for Looker Studio reports and for [Looker reports](/looker/docs/glossary#reports).\n\n1. Add data to your report.\n2. After you select a data source but before you click **Add** , click **Data credentials**.\n3. Select the credential type. If a data source supports Owner's Credentials, then **Owner's Credentials** is selected and you are the data credential owner by default.\n4. Click **Add**.\n\nYou can also [update the data credentials](#update-credentials) as needed after creating the data source.\n\nTypes of credentials\n--------------------\n\nClick the headers of the following sections to learn more about each type of data credential.\n\n### Owner's Credentials\n\nSelect this option if you want to let other people view or create reports that use this data without requiring them to have their own access to the dataset. Owner's Credentials uses the credentials of a specific person to authorize access to the dataset. By default, you are the credential owner if you created the data source, but another editor of the data source can become the credential owner.\n| **Note:** Using the Owner's Credentials option does not grant other people the right to access the dataset directly. The Owner's Credentials are never displayed or transmitted \"in the clear.\"\n\n#### Example\n\nYou've created a Google Analytics data source that connects to your company's All Website Traffic view. You selected **Owner's Credentials** in the data source **Configuration** tab. You've shared this data source with Nikhil and Betsy. Nikhil has his own Google Analytics login and permission to access the All Website Traffic view. Betsy does not have access to this view. However, both Nikhil and Betsy can view reports based on this data source, because it uses your credentials, not theirs.\n\n### Viewer's Credentials\n\nThis option requires each user of the data source (or reports that are built using the data source) to provide their own credentials to access the dataset. If they don't have access to the dataset, they won't be able to view the data in reports or to edit the data source fields.\n\nWhen a viewer runs a report that is based on a BigQuery data source, Looker Studio displays a dialog that asks for consent to collect their email address as part of [audit logging](/bigquery/docs/reference/auditlogs). Users can deny this consent when prompted, or [revoke email logging](#revoke-email-logging) at any time.\n| **Warning:** When you enable Viewer's Credentials for a data source, Looker Studio won't render [hyperlinks](/looker/docs/studio/hyperlink) or [images](/looker/docs/studio/image) in dimensions from that data source.\n\n#### Example\n\nIt's the same scenario as described previously in the \"Owner's Credentials\" section, only this time you've selected the **Viewer's Credentials** option. You've shared a report that was built using this data source with the same people, but only Nikhil, who has his own credentials to the All Website Traffic view in Google Analytics, will be able to see the data. When Betsy views the report, she won't see this data.\n\n### Service Account Credentials\n\nInstead of delegating access using the **Owner's Credentials** option, or requiring individual report viewers to have access to the data using the **Viewer's Credentials** option, Looker Studio can use a service account to authenticate and get authorization to access your data.\n\n\u003cbr /\u003e\n\nNote the following limitations and requirements:\n\n\u003cbr /\u003e\n\n\u003cbr /\u003e\n\n- The **Service Account Credentials** option is available only for Google Workspace or Cloud Identity managed organizations.\n- Service Account Credentials are available only for BigQuery data sources.\n- Service accounts must be set up by a Google Workspace or Cloud Identity administrator. If that's you, [learn how to set up a service account](/looker/docs/studio/set-up-a-google-cloud-service-account-for-looker-studio).\n\n\u003cbr /\u003e\n\nIf a service account has already been set up, you can use it to connect a data source to BigQuery data by providing the service account's email address in the data source credentials dialog. Follow these steps:\n\n1. [Create or edit a BigQuery data source](/looker/docs/studio/connect-to-google-bigquery).\n2. In the toolbar, click **Data Credentials**.\n3. Select **Service Account Credentials**.\n4. Enter your **Service account** email address in the box.\n5. Click **Update**.\n\n#### How to find your service account\n\nThe simplest way to know which service account to use is to ask your Google Cloud administrator. Your organization may have multiple service accounts set up, so it's important to use the correct one.\n\nIf you have access to the Cloud console, you can use it to list the available service accounts in one of two ways:\n\n**Use Cloud console**\n\n1. Navigate to the Google [Cloud Platform \\\u003e IAM \\& Admin \\\u003e Service accounts](https://console.cloud.google.com/iam-admin/serviceaccounts) page.\n2. Select a project, if necessary.\n3. In the **Service accounts for project** page, locate the service account that Looker Studio will use to access your BigQuery data.\n4. Copy the email address for that account.\n\n**Use Cloud shell**\n\n1. [Open the Cloud shell](https://console.cloud.google.com/home/dashboard?cloudShell=true).\n2. Select a project, if necessary.\n3. To list the service accounts to which you have access, run the [Google Cloud CLI iam service-accounts list](https://cloud.google.com/sdk/gcloud/reference/iam/service-accounts/list) command:\n\n `gcloud iam service-accounts list`\n\n### Getting an error?\n\nIf you see an error in the credentials dialog or in your reports while you're trying to use a service account, it's most likely caused by an incomplete or incorrect service account setup. See [Set up a Google Cloud service account for Looker Studio](/looker/docs/studio/set-up-a-google-cloud-service-account-for-looker-studio) for possible solutions.\n\nUpdate credentials\n------------------\n\nEditors of a data source can update its credentials:\n\n- Editors can change the type of credentials that are used by the data source.\n- Editors can become the new credential owner.\n\nTo update a data source's credentials, follow these steps:\n\n1. [Edit the data source](/looker/docs/studio/edit-a-data-source-article).\n2. At the top of the screen, click **Data credentials**.\n3. Select the new credential type.\n\nTo become a data source's credential owner, follow these steps:\n\n1. [Edit the data source](/looker/docs/studio/edit-a-data-source-article).\n2. At the top of the screen, click **Data credentials**.\n3. Select **Make me the owner**.\n\n| **Important:** Changing data source credentials may cause people who don't have access to the underlying dataset to see errors in reports.\n\nRevoke your data credentials\n----------------------------\n\nData sources that use your credentials continue to retrieve data even if you can no longer edit the data source. Revoking your credentials stops the data source from accessing the data \"as you.\"\n\nFor example, if you create a data source for your company and then leave that company, you can stop that data source from retrieving data. You can do this for an individual data source, or you can revoke your credentials from all data sources to which you no longer have access.\n\n### Revoke your credentials from a single data source\n\n1. [Sign in to Looker Studio](https://lookerstudio.google.com).\n2. At the top, select **Data Sources**.\n3. Browse or search for the file that you want to stop sharing; then, on the right, click **More** .\n4. Click **Revoke data source**.\n\n### Revoke your credentials from all data that sources you no longer own\n\n1. [Sign in to Looker Studio](https://lookerstudio.google.com).\n2. At the top right, click **Settings** .\n3. Select **Revoke Data Source**.\n4. A list of all data sources that you created but no longer own appears.\n5. Click **Revoke all**.\n\n### Revoke email logging\n\nTo stop providing your email address to reports that request it, you can revoke your consent by following these steps:\n\n1. [Sign in to Looker Studio](https://lookerstudio.google.com).\n2. In the upper right, click **Settings** .\n3. On the left, select **Revoke Consent**.\n4. Under **Revoke audit logging consent** , click **Revoke all**.\n\nAfter you revoke your consent, you'll need to grant it again before you can see personalized data in reports.\n\nData credential administration\n------------------------------\n\nLooker Studio administrators can control whether users in their organization can set data credentials for data sources that they have permission to edit. [Learn more about managing data credentials for your organization](https://support.google.com/a/answer/14340218).\n\nRelated resources\n-----------------\n\n- [Ways to share your reports](/looker/docs/studio/ways-to-share-your-reports)\n- [Set up a Google Cloud service account for Looker Studio](/looker/docs/studio/set-up-a-google-cloud-service-account-for-looker-studio)"]]
。
。
。